com.kdayun.z1.core.security.xss

类 XssHttpServletRequestWrapper

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

com.kdayun.z1.core.security.xss.XssHttpServletRequestWrapper

所有已实现的接口:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class XssHttpServletRequestWrapper
extends javax.servlet.http.HttpServletRequestWrapper

XSS过滤处理

字段概要

字段

限定符和类型	字段和说明
(专用程序包) java.lang.String	encoding
(专用程序包) javax.servlet.http.HttpServletRequest	orgRequest

从接口继承的字段 javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

构造器概要

构造器

构造器和说明
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request, java.lang.String encoding)
XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request, java.lang.String encoding, java.util.List<java.lang.String> excludeTags, java.util.List<java.lang.String> includeTags)

方法概要

限定符和类型	方法和说明
java.lang.String	getHeader(java.lang.String name)
javax.servlet.ServletInputStream	getInputStream()
javax.servlet.http.HttpServletRequest	getOrgRequest() #获取最原始的request
static javax.servlet.http.HttpServletRequest	getOrgRequest(javax.servlet.http.HttpServletRequest request) #获取最原始的request
java.lang.String	getParameter(java.lang.String name)
java.util.Map<java.lang.String,java.lang.String[]>	getParameterMap()
java.lang.String[]	getParameterValues(java.lang.String name)

从类继承的方法 javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeaderNames, getHeaders, getHttpServletMapping, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getTrailerFields, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isTrailerFieldsReady, isUserInRole, login, logout, newPushBuilder, upgrade

从类继承的方法 javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

字段详细资料

orgRequest

javax.servlet.http.HttpServletRequest orgRequest

encoding

java.lang.String encoding

构造器详细资料

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request,
                                    java.lang.String encoding,
                                    java.util.List<java.lang.String> excludeTags,
                                    java.util.List<java.lang.String> includeTags)

参数:

request - HttpServletRequest

encoding - 编码

excludeTags - 例外的特定标签

includeTags - 需要过滤的标签

XssHttpServletRequestWrapper

public XssHttpServletRequestWrapper(javax.servlet.http.HttpServletRequest request,
                                    java.lang.String encoding)

参数:

request - HttpServletRequest

encoding - 编码

方法详细资料

getInputStream

public javax.servlet.ServletInputStream getInputStream()
                                                throws java.io.IOException

指定者:

getInputStream 在接口中 javax.servlet.ServletRequest

覆盖:

getInputStream 在类中 javax.servlet.ServletRequestWrapper

抛出:

java.io.IOException

getParameter

public java.lang.String getParameter(java.lang.String name)

指定者:

getParameter 在接口中 javax.servlet.ServletRequest

覆盖:

getParameter 在类中 javax.servlet.ServletRequestWrapper

getParameterValues

public java.lang.String[] getParameterValues(java.lang.String name)

指定者:

getParameterValues 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterValues 在类中 javax.servlet.ServletRequestWrapper

getParameterMap

public java.util.Map<java.lang.String,java.lang.String[]> getParameterMap()

指定者:

getParameterMap 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterMap 在类中 javax.servlet.ServletRequestWrapper

getHeader

public java.lang.String getHeader(java.lang.String name)

指定者:

getHeader 在接口中 javax.servlet.http.HttpServletRequest

覆盖:

getHeader 在类中 javax.servlet.http.HttpServletRequestWrapper

getOrgRequest

public javax.servlet.http.HttpServletRequest getOrgRequest()

#获取最原始的request

返回:

响应对象

getOrgRequest

public static javax.servlet.http.HttpServletRequest getOrgRequest(javax.servlet.http.HttpServletRequest request)

#获取最原始的request

参数:

request - HttpServletRequest

返回:

请求对象