新建一个过滤器类CheckStringFilter
package com.cwc.filter;
import java.io.IOException;
import java.util.Date;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import
javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import
javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import
javax.servlet.http.HttpServletRequest;
import
javax.servlet.http.HttpServletResponse;
import org.apache.log4j.Logger;
import com.cwc.util.StringUtil;
/**
*
* @author chunxiu@orientalwisdom.com
*
*/
public
class CheckStringFilter implements Filter {
private static Logger log =
Logger.getLogger("PLATFORM");
private FilterConfig config;
private
String filterConfig;
public void destroy() {
this.config = null;
filterConfig =
null;
}
public void doFilter(ServletRequest servletrequest, ServletResponse
servletresponse,
FilterChain filterchain) throws IOException,
ServletException {
try
{
HttpServletRequest req =
(HttpServletRequest)servletrequest;
HttpServletResponse resp =
(HttpServletResponse)servletresponse;
String currentURL =
StringUtil.getCurrentURL(req); //当前访问URL
log.info(new Date()
+"
currentURL:"+currentURL);
System.out.println(filterConfig);
String[]
list = filterConfig.split(",");
boolean flag =
true;
if(currentURL!=null&&!"".equals(currentURL)){
flag =
StringUtil.checkStringValue(currentURL,list);
}
if(flag){
// Map
map = req.getParameterMap();
// Set key = map.keySet();
//
for(Object object: key.toArray()){
// String parakey =
object.toString();
// String paravalue =
((String[])map.get(object))[0];
//
System.out.println("key="+parakey+" paravalue="+paravalue);
//
flag = StringUtil.checkStringValue(paravalue,list);
//
if(!flag){
// log.error(new Date()+" error Parameter:
"+"key="+parakey+" paravalue="+paravalue);
// break;
//
}
// }
}else{
log.error(new Date()+" error
currentURL:"+currentURL);
}
if(!flag){
resp.sendRedirect("./404.html");
}else{
filterchain.doFilter(servletrequest,
servletresponse);
}
} catch (Exception e)
{
e.printStackTrace();
log.error("OrgChangeFilter error:" +
e);
}
}
public void init(FilterConfig filterconfig) throws ServletException
{
this.config = filterconfig;
filterConfig =
filterconfig.getInitParameter("regexp");
}
public FilterConfig
getFilterConfig() {
return config;
}
}
在web.xml中加入
<filter>
<filter-name>CheckStringFilter</filter-name>
<filter-class>com.cwc.filter.CheckStringFilter
</filter-class>
<init-param>
<param-name>regexp</param-name>
<param-value><,>,+,*,#,|,(,),\‘,‘,$</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>CheckStringFilter</filter-name>
<url-pattern>*.html</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CheckStringFilter</filter-name>
<url-pattern>/appController/*</url-pattern>
</filter-mapping>
原文:http://www.cnblogs.com/weifeng0729/p/3613259.html