net.waglewagle.servlet.filter

Class XssDefenseFilter

java.lang.Object

net.waglewagle.servlet.filter.AbstractFilter

net.waglewagle.servlet.filter.AbstractHttpFilter

net.waglewagle.servlet.filter.XssDefenseFilter

All Implemented Interfaces:

javax.servlet.Filter

public class XssDefenseFilter
extends AbstractHttpFilter

XSS(Cross Site Scripting) 방어 필터

파라미터 값 중 스크립트 태그(<script...> ~ </script>)가 있는 경우, 태그를 텍스트화하여 사용되도록 한다.

Since:

2019. 5. 13.

Author:

강신원

Constructor Summary

Constructors

Constructor and Description
XssDefenseFilter()

Method Summary

Modifier and Type	Method and Description
void	doFilter(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, javax.servlet.FilterChain filterChain) HTTP 요청을 처리한다.
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class net.waglewagle.servlet.filter.AbstractHttpFilter

doFilter

Methods inherited from class net.waglewagle.servlet.filter.AbstractFilter

destroy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XssDefenseFilter

public XssDefenseFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Overrides:

init in class AbstractFilter

Throws:

javax.servlet.ServletException

See Also:

Filter.init(javax.servlet.FilterConfig)

doFilter

public void doFilter(javax.servlet.http.HttpServletRequest request,
                     javax.servlet.http.HttpServletResponse response,
                     javax.servlet.FilterChain filterChain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Description copied from class: AbstractHttpFilter

HTTP 요청을 처리한다.

Specified by:

doFilter in class AbstractHttpFilter

Parameters:

request - HttpServletRequest 구현 클래스의 객체.

response - HttpServletResponse 구현 클래스의 객체.

Throws:

java.io.IOException

javax.servlet.ServletException