java 过滤器过滤特殊字符

1、继承Filter的过滤类

package fly.cloud.bank.config.filter;import org.springframework.stereotype.Component;import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;/*** @ProjectName: fly-cloud-bank* @Package: fly.cloud.bank.config.filter* @ClassName: BankParamFilter* @Author: hfq* @Description: bank服务入参特殊符号去除过滤器* @Date: 2021/4/8 10:00* @Version: 1.0*/
@Component
public class BankParamFilter implements Filter {@Overridepublic void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {System.out.println("bank服务入参特殊符号去除过滤器");ParameterRequestWrapper parameterRequestWrapper = new ParameterRequestWrapper((HttpServletRequest) servletRequest);filterChain.doFilter(parameterRequestWrapper,servletResponse);}
}

package fly.cloud.bank.config.filter;import com.alibaba.fastjson.JSON;
import com.alipay.api.internal.util.file.IOUtils;
import com.aliyun.openservices.log.http.utils.HttpHeaders;
import com.fasterxml.jackson.core.type.TypeReference;
import com.fasterxml.jackson.databind.ObjectMapper;
import fly.cloud.bank.urtils.CharacterUtils;
import org.apache.commons.lang.StringUtils;
import org.springframework.http.MediaType;import javax.servlet.ReadListener;
import javax.servlet.ServletInputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.util.*;/*** @ProjectName: fly-cloud-bank* @Package: fly.cloud.bank.config.filter* @ClassName: ParameterRequestWrapper* @Author: hfq* @Description: 重写HttpServletRequestWrapper类用于修改参数* @Date: 2021/4/8 10:20* @Version: 1.0*/
public class ParameterRequestWrapper extends HttpServletRequestWrapper {public ParameterRequestWrapper(HttpServletRequest request) {super(request);//只处理Post、PUT请求，这儿不用处理}/*** 重写getInputStream方法  post类型的请求参数必须通过流才能获取到值*/@Overridepublic ServletInputStream getInputStream() throws IOException {Map<String,Object> params = new HashMap<>();if(!(super.getHeader(HttpHeaders.CONTENT_TYPE).equalsIgnoreCase(MediaType.APPLICATION_JSON_UTF8_VALUE) || super.getHeader(HttpHeaders.CONTENT_TYPE).equalsIgnoreCase(MediaType.APPLICATION_JSON_VALUE))){return super.getInputStream();}//为空，直接返回String json = IOUtils.toString(super.getInputStream(), "utf-8");if (StringUtils.isEmpty(json)) {return super.getInputStream();}System.out.println("转化前参数："+json);//reqBodyStr转为Map对象params = new ObjectMapper().readValue(json, new TypeReference<HashMap<String, Object>>() {});//去除特殊字符modifyParameterValues(params);System.out.println("转化后参数："+JSON.toJSONString(params));ByteArrayInputStream bis = new ByteArrayInputStream(JSON.toJSONString(params).getBytes("utf-8"));return new MyServletInputStream(bis);}/*** 将parameter的值去除特殊字符后重写回去*/public void modifyParameterValues(Map<String,Object> params){Set<String> set = params.keySet();Iterator<String> it=set.iterator();while(it.hasNext()){String key= it.next();//处理参数getValueByKey(params,key);}}private void getValueByKey(Map<String,Object> params,String key) {Object value = judgeObject(params.get(key));params.put(key,value);}private Object recursiveReplaceCharacter(Map<String, Object> vo) {Map<String, Object> replaceMap = new HashMap<>();for(String key : vo.keySet()){//keySet获取map集合key的集合  然后在遍历key即可Object replaceMapValue = vo.get(key);Object a = judgeObject(replaceMapValue);replaceMap.put(key,a);}return replaceMap;}private Object judgeObject(Object replaceMapValue) {if (null == replaceMapValue) {//key对应的值为空return null;}if (replaceMapValue instanceof String) {//key对应的值为String类型, 去空格后重新放入mapreturn CharacterUtils.replaceBankParameter((String) replaceMapValue);} else if (replaceMapValue instanceof Map) {return recursiveReplaceCharacter((Map<String,Object>) replaceMapValue);} else if (replaceMapValue instanceof List) {//key对应的值为List类型List<Object> alist = (List<Object>) replaceMapValue;for (int i = 0; i < alist.size(); i++) {//遍历listObject vol = alist.get(i);if (vol instanceof String) {//list里的元素为String, 去空格alist.set(i,CharacterUtils.replaceBankParameter((String) vol));} else if (vol instanceof Map) {//list里的元素为Map, 递归处理alist.set(i, recursiveReplaceCharacter((Map<String,Object>) vol));}}return alist;}return replaceMapValue;}
}class MyServletInputStream extends  ServletInputStream{private ByteArrayInputStream bis;public MyServletInputStream(ByteArrayInputStream bis){this.bis=bis;}@Overridepublic boolean isFinished() {return true;}@Overridepublic boolean isReady() {return true;}@Overridepublic void setReadListener(ReadListener listener) {}@Overridepublic int read(){return bis.read();}
}

@Slf4j
public class CharacterUtils {/*** 替换银行入参特殊字符*/public static String replaceBankParameter(String str){String regEx = "[‘&;\\[\\]<>|]";str = Pattern.compile(regEx).matcher(str).replaceAll("").trim();return str;}
}

java 过滤器过滤特殊字符相关推荐

java正则表达式过滤特殊字符的正则表达式
在网上找了好久也没找到个合适的正则表达式以过滤特殊字符:自己学习了下,写了两个,实现要求. Java代码 // 过滤特殊字符 public static String StringFilter(Str ...
java正则过滤特殊字符
import java.util.regex.Matcher; import java.util.regex.Pattern; import java.util.regex.PatternSyntax ...
java 过滤器过滤文件中的文件_Java 使用FileFilter过滤器对文件进行搜索
FileFilter概述 java.io.FileFilter是一个接口,是File的过滤器. 该接口的对象可以传递给File类的listFiles(FileFilter filter)作为参数,Fi ...
java过滤器过滤Emoji 表情
1.web.xml添加过滤器 <filter><filter-name>EmojiFilter</filter-name><filter-class>c ...
java正则表达式过滤特殊字符_使用Java正则表达式过滤特殊字符
在某航空集团,系统参数必须过滤一下字符,于是正则表达式处理拦路了! 需求: 系统输入框(所有输入框),所有URL,过滤以下关键字和特殊字符(下述字符,有哪些影响到业务系统使用的,请具体列出,并说明原因 ...
Java过滤特殊字符的正则表达式
在网上找了好久也没找到个合适的正则表达式以过滤特殊字符:自己学习了下,写了两个,实现要求. Java代码 // 过滤特殊字符 public static String StringFilt ...
java 正则表达式过滤_java正则表达式过滤特殊字符
Java用正则表达式过滤特殊字符,只允许中文.字母Java用正则表达式过滤特殊字符,只允许中文.字母或数字,该怎么写? String s1="我是正确测试数据aasdf2342343AS ...
java stream过滤_Java Stream过滤器
java stream过滤 Java Stream filter can be very helpful when you want to do some processing only on som ...
Java添加过滤器过滤xss入侵
Filter过滤器过滤XSS攻击一.springmvc框架 1.添加自定义过滤器文件XssFilter.java和XssHttpServletRequestWrapper.java XssFilte ...

java 过滤器过滤特殊字符

java 过滤器过滤特殊字符相关推荐

最新文章

热门文章