public class RequestWrapper extends HttpServletRequestWrapper {
HttpServletRequest orgRequest = null;
public RequestWrapper(HttpServletRequest request) {
super(request);
orgRequest = request;
}
@Override
public Map<String,String[]> getParameterMap() {
Map<String,String[]> map = new LinkedHashMap();
Map<String,String[]> parameters = super.getParameterMap();
for (String key : parameters.keySet()) {
System.out.println("getParameterMap---------得到的key：" + key);
String[] values = parameters.get(key);
for (int i = 0; i < values.length; i++) {
values[i] = XssClean.xssClean(values[i]);
}
map.put(key, values);
}
return map;
}
@Override
public Enumeration<String> getParameterNames() {
Enumeration enumeration = super.getParameterNames();
String attributeName = "";
while (enumeration.hasMoreElements()) {
attributeName = (String) enumeration.nextElement();
getParameterValues(attributeName);
}
return enumeration;
}
@Override
public String[] getParameterValues(String paramString){
String[] arrayOfString1 = super.getParameterValues(paramString);
if (arrayOfString1 == null) {
return null;
}
int i = arrayOfString1.length;
String[] arrayOfString2 = new String[i];
for (int j = 0; j < i; j++) {
System.out.println("getParameterValues---------得到的key：" + arrayOfString1[j]);
arrayOfString2[j] =XssClean.xssClean(arrayOfString1[j]);
}
return arrayOfString2;
}
@Override
public String getParameter(String paramString){
String str = super.getParameter(paramString);
if (str == null) {
return null;
}
return XssClean.xssClean(str);
}
public String getHeader(String paramString) {
String str = super.getHeader(paramString);
if (str == null)
return null;
return XssClean.xssClean(str);
}
public String getQueryString() {
String value = super.getQueryString();
if (value != null) {
value = XssClean.xssClean(value);
}
return value;
}還是運行上面那個有問題的sql注入的請求，輸出依舊沒有“value”
getParameterMap---------得到的key：id
getParameterMap---------得到的key：label
getParameterMap---------得到的key：type
getParameterMap---------得到的key：description
getParameterMap---------得到的key：sort
getParameterMap---------得到的key：remarks
