com.zgeo.web.Entity

类 XssRequestWrapper

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

com.zgeo.web.Entity.XssRequestWrapper

所有已实现的接口:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class XssRequestWrapper
extends javax.servlet.http.HttpServletRequestWrapper

XSS配置

字段概要

从接口继承的字段 javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

构造器概要

构造器

构造器和说明
XssRequestWrapper(javax.servlet.http.HttpServletRequest request)

方法概要

限定符和类型	方法和说明
java.lang.Object	getAttribute(java.lang.String name) 获取attribute,特殊字符过滤
java.lang.String	getHeader(java.lang.String name) 对请求头部进行特殊字符过滤
java.lang.String	getParameter(java.lang.String name) 对参数中特殊字符进行过滤
java.lang.String[]	getParameterValues(java.lang.String name) 对数组参数进行特殊字符过滤

从类继承的方法 javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeaderNames, getHeaders, getHttpServletMapping, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getTrailerFields, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isTrailerFieldsReady, isUserInRole, login, logout, newPushBuilder, upgrade

从类继承的方法 javax.servlet.ServletRequestWrapper

getAsyncContext, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 javax.servlet.ServletRequest

getAsyncContext, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameterMap, getParameterNames, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

构造器详细资料

XssRequestWrapper

public XssRequestWrapper(javax.servlet.http.HttpServletRequest request)

方法详细资料

getParameterValues

public java.lang.String[] getParameterValues(java.lang.String name)

对数组参数进行特殊字符过滤

指定者:

getParameterValues 在接口中 javax.servlet.ServletRequest

覆盖:

getParameterValues 在类中 javax.servlet.ServletRequestWrapper

getParameter

public java.lang.String getParameter(java.lang.String name)

对参数中特殊字符进行过滤

指定者:

getParameter 在接口中 javax.servlet.ServletRequest

覆盖:

getParameter 在类中 javax.servlet.ServletRequestWrapper

getAttribute

public java.lang.Object getAttribute(java.lang.String name)

获取attribute,特殊字符过滤

指定者:

getAttribute 在接口中 javax.servlet.ServletRequest

覆盖:

getAttribute 在类中 javax.servlet.ServletRequestWrapper

getHeader

public java.lang.String getHeader(java.lang.String name)

对请求头部进行特殊字符过滤

指定者:

getHeader 在接口中 javax.servlet.http.HttpServletRequest

覆盖:

getHeader 在类中 javax.servlet.http.HttpServletRequestWrapper