JAVA WEB之XSS防御工具类代码示例

org.jsoup

jsoup

1.13.1

工具类代码

---

import org.jsoup.Jsoup;

import org.jsoup.safety.Whitelist;

import java.util.regex.Matcher;

import java.util.regex.Pattern;

/**

• Xss防御工具类

• @author tarzan liu

• @version V1.0

• @date 2021年7月11日

*/

public class XssKillerUtil {

private static final String[] WHITE_LIST = {“p”, “strong”, “pre”, “code”, “span”, “blockquote”, “em”, “a”};

private static String reg = null;

private static String legalTags = null;

static {

StringBuilder regSb = new StringBuilder(“<”);

StringBuilder tagsSb = new StringBuilder();

for (String s : WHITE_LIST) {

regSb.append(“(?!”).append(s).append(" )");

tagsSb.append(‘<’).append(s).append(‘>’);

}

regSb.append(“