|
|
|
@ -31,6 +31,16 @@ public class XssAndSqlFilter implements Filter { |
|
|
|
XssAndSqlHttpServletRequestWrapper xssRequest = null; |
|
|
|
if (request instanceof HttpServletRequest) { |
|
|
|
method = ((HttpServletRequest) request).getMethod(); |
|
|
|
|
|
|
|
// 解决不需要xss也被拦截的问题
|
|
|
|
HttpServletRequest req = (HttpServletRequest) request; |
|
|
|
//获取请求你ip后的全部路径
|
|
|
|
String uri = req.getRequestURI(); |
|
|
|
if (uri.indexOf("/system/notice/") >= 0) { |
|
|
|
chain.doFilter(request, response); |
|
|
|
return; |
|
|
|
} |
|
|
|
//获取请求你ip后的全部路径
|
|
|
|
xssRequest = new XssAndSqlHttpServletRequestWrapper((HttpServletRequest) request); |
|
|
|
} |
|
|
|
if ("POST".equalsIgnoreCase(method)) { |
|
|
|
|