| commit | author | age | ||
| 9bcb19 | 1 | /* |
| I | 2 | Copyright [2020] [https://www.xiaonuo.vip] |
| 3 | ||
| 4 | Licensed under the Apache License, Version 2.0 (the "License"); | |
| 5 | you may not use this file except in compliance with the License. | |
| 6 | You may obtain a copy of the License at | |
| 7 | ||
| 8 | http://www.apache.org/licenses/LICENSE-2.0 | |
| 9 | ||
| 10 | Unless required by applicable law or agreed to in writing, software | |
| 11 | distributed under the License is distributed on an "AS IS" BASIS, | |
| 12 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| 13 | See the License for the specific language governing permissions and | |
| 14 | limitations under the License. | |
| 15 | ||
| 16 | Snowy采用APACHE LICENSE 2.0开源协议，您在使用过程中，需要注意以下几点： | |
| 17 | ||
| 18 | 1.请不要删除和修改根目录下的LICENSE文件。 | |
| 19 | 2.请不要删除和修改Snowy源码头部的版权声明。 | |
| 20 | 3.请保留源码和相关描述文件的项目出处，作者声明等。 | |
| 21 | 4.分发源码时候，请注明软件出处 https://gitee.com/xiaonuobase/snowy | |
| 22 | 5.在修改包名，模块名称，项目代码等时，请注明软件出处 https://gitee.com/xiaonuobase/snowy | |
| 23 | 6.若您的项目无法满足以上几点，可申请商业授权，获取Snowy商业授权许可，请在官网购买授权，地址为 https://www.xiaonuo.vip | |
| 24 | */ | |
| 25 | package vip.xiaonuo.sys.core.filter.xss; | |
| 26 | ||
| 27 | ||
| 28 | import vip.xiaonuo.core.context.constant.ConstantContextHolder; | |
| 29 | ||
| 30 | import javax.servlet.*; | |
| 31 | import javax.servlet.http.HttpServletRequest; | |
| 32 | import java.io.IOException; | |
| 33 | import java.util.List; | |
| 34 | ||
| 35 | /** | |
| 36 | * xss过滤器 | |
| 37 | * | |
| 38 | * @author yubaoshan | |
| 39 | * @date 2020/6/21 10:04 | |
| 40 | */ | |
| 41 | public class XssFilter implements Filter { | |
| 42 | ||
| 43 | @Override | |
| 44 | public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { | |
| 45 | HttpServletRequest httpServletRequest = (HttpServletRequest) request; | |
| 46 | String servletPath = httpServletRequest.getServletPath(); | |
| 47 | ||
| 48 | // 获取不进行url过滤的接口 | |
| 49 | List<String> unXssFilterUrl = ConstantContextHolder.getUnXssFilterUrl(); | |
| 50 | if (unXssFilterUrl != null && unXssFilterUrl.contains(servletPath)) { | |
| 51 | chain.doFilter(request, response); | |
| 52 | } else { | |
| 53 | chain.doFilter(new XssHttpServletRequestWrapper((HttpServletRequest) request), response); | |
| 54 | } | |
| 55 | } | |
| 56 | ||
| 57 | } | |
