找了幾個java后臺攔截xss的代碼，大致都是下面這樣

package com.ibm.web.beans;

import java.util.Enumeration;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletRequestWrapper;

public class XssHttpServletRequestWrapper extends HttpServletRequestWrapper {

public XssHttpServletRequestWrapper(HttpServletRequest servletRequest) {

super(servletRequest);

}

public String[] getParameterValues(String parameter) {

String[] values = super.getParameterValues(parameter);

if (values==null) {

return null;

}

int count = values.length;

String[] encodedValues = new String[count];

for (int i = 0; i < count; i++) {

encodedValues[i] = cleanXSS(values[i]);

}

return encodedValues;

}

public String getParameter(String parameter) {

String value = super.getParameter(parameter);

if (value == null) {

return null;

}

return cleanXSS(value);

}

public String getHeader(String name) {

String value = super.getHeader(name);

if (value == null)

return null;

return cleanXSS(value);

}

private String cleanXSS(String value) {

//You'll need to remove the spaces from the html entities below

value = value.replaceAll("", "& gt;");

value = value.replaceAll("\\(", "& #40;").replaceAll("\\)", "& #41;");

value = value.replaceAll("'", "& #39;");

value = value.replaceAll("eval\\((.*)\\)", "");

value = value.replaceAll("[\\\"\\\'][\\s]*javascript:(.*)[\\\"\\\']", "\"\"");

value = value.replaceAll("script", "");

return value;

}

}

這里只對param做了轉義，請問如何對ajax的json請求進行轉義？

前臺代碼

$.ajaxSetup({

contentType: 'application/json'

});

var obj = {"name" : "'", "code" : "

$.post("/submit", JSON.stringify(obj), function (result, status) {

alert('ok');

}, "json");

后臺代碼

@RequestMapping(value = "/submit", method = RequestMethod.POST)

public void submit(@RequestBody Student student) {

System.out.println(student.getName());

System.out.println(student.getCode());

}

這里對ajax提交的json代碼就沒有做轉義，我用的是spring，請問該如何對ajax請求轉義，是使用aop對set方法攔截，還是修改HttpMessageConverter在json轉為java對象時轉義，還是其他方式？

總結

以上是生活随笔為你收集整理的java后台处理ajax请求_java后台怎么对ajax请求的内容进行xss转义？的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。