用过滤器对jsp页面中的敏感字段进行过滤

来源：互联网发布：知乎怎么改个性域名编辑：程序博客网时间：2024/05/05 18:39

WordWriter.java
package myservlets;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

public class WordWriter implements Filter {

protected FilterConfig filterConfig;
public void destroy() {
this.filterConfig=null;

}

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,

ServletException {

   request.setCharacterEncoding("UTF-8");
   response.setContentType("text/html;charset=UTF-8");
   HttpServletResponse res=(HttpServletResponse) response;
   PrintWriter out=response.getWriter();
   CharResponseWrapper wrapper=new CharResponseWrapper(res);
   chain.doFilter(request, wrapper);
   String resStr=wrapper.toString();

    //敏感字符集
   List<String> illegal_wordList = new ArrayList<String>();
   illegal_wordList.add("妈的");
   illegal_wordList.add("垃圾");
   for (Iterator iter = illegal_wordList.iterator(); iter.hasNext();) {
   String element = (String) iter.next();
   if (resStr.indexOf(element) > 0) {
    resStr = resStr.replaceAll(element, "**");
   }
  }   out.println(resStr);
}

public void init(FilterConfig config) throws ServletException {
this.filterConfig=config;

}

public void setFilterConfig(final FilterConfig filterConfig) {
this.filterConfig = filterConfig;
}

}

CharResponseWrapper.java
package myservlets;

import java.io.CharArrayWriter;
import java.io.PrintWriter;

import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpServletResponseWrapper;

public class CharResponseWrapper extends HttpServletResponseWrapper {
private CharArrayWriter output;

public String toString() {
return output.toString();
}

public CharResponseWrapper(HttpServletResponse response) {
super(response);
output = new CharArrayWriter();
}

public PrintWriter getWriter() {
return new PrintWriter(output);
}
}

MyJsp.jsp
<%@ page language="java" pageEncoding="gb2312"%>

<%@ taglib uri="http://struts.apache.org/tags-bean" prefix="bean" %>
<%@ taglib uri="http://struts.apache.org/tags-html" prefix="html" %>
<%@ taglib uri="http://struts.apache.org/tags-logic" prefix="logic" %>
<%@ taglib uri="http://struts.apache.org/tags-tiles" prefix="tiles" %>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html:html lang="true">
   <head>
     <html:base />
     <title>MyJsp.jsp</title>
   </head>

   <body>
     This a struts page. <br>
     真她妈的!垃圾
   </body>
</html:html>

web.xml

<filter-name>Word Filter</filter-name>

<filter-class>myservlets.WordWriter</filter-class>

</filter>

<filter-mapping>

<filter-name>Word Filter</filter-name>

<url-pattern>/*</url-pattern>

</filter-mapping>

效果:

This a struts page.
真她**!**