使用装饰者模式,增强Request对象中的getParameter()方法
package com.zuoyuer.filter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import java.util.HashSet;
/**
* @author Zuoyueer
* Date: 2019/10/27
* Time: 22:34
* @projectName JavaEE
* @description: 装饰者模式增强类
*/
public class MyRequest extends HttpServletRequestWrapper {
private HashSet<String> words;
public MyRequest(HttpServletRequest request, HashSet<String> words) {
super(request);
this.words = words;
}
@Override
public String getParameter(String name) {
String parameter = super.getParameter(name);
System.out.println("接受到的实际值: "+parameter);
if (parameter!=null){
for (String word : words) {
System.out.println("循环执行: ");
System.out.println("word的值:" +word);
//替换敏感词
parameter = parameter.replace(word, "***");
System.out.println("修改后的值: "+parameter);
}
}
System.out.println("最终值:"+parameter);
return parameter;
}
}
package com.zuoyuer.filter;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.*;
import java.nio.charset.StandardCharsets;
import java.util.HashSet;
/**
* @author Zuoyueer
* Date: 2019/10/27
* Time: 22:26
* @projectName JavaEE
* @description: 屏蔽敏感字词
*/
@WebFilter(filterName = "WordsFilter", urlPatterns = "/*")
public class WordsFilter implements Filter {
private HashSet<String> words = new HashSet<>();
public void destroy() {
}
public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws ServletException, IOException {
HttpServletRequest request = (HttpServletRequest) req;
HttpServletResponse response = (HttpServletResponse) resp;
//创建增强的类对象
MyRequest myRequest = new MyRequest(request, words);
//request增强对象传递给Servlet
chain.doFilter(myRequest, response);
}
public void init(FilterConfig config) {
//获取输入流
InputStream is = config.getServletContext().getResourceAsStream("WEB-INF/words.txt");
try {
//字节转字符
BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(is, StandardCharsets.UTF_8));
String line;
while ((line = bufferedReader.readLine()) != null) {
System.out.println("读取的值" + line);
//添加到集合中
words.add(line);
}
} catch (Exception e) {
e.printStackTrace();
} finally {
if (is != null) {
try {
is.close();
} catch (IOException e) {
e.printStackTrace();
}
}
}
}
}
package com.zuoyuer.web;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
/**
* @author Zuoyueer
* Date: 2019/10/27
* Time: 19:59
* @projectName JavaEE
* @description: 接受表单提交敏感信息,展示修改后的结果
*/
@WebServlet(urlPatterns="/demo_01", name="ServletDemo_01")
public class ServletDemo_01 extends HttpServlet {
private static final long serialVersionUID = 2978514982177358755L;
@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
System.out.println("请求到要访问资源了~!");
String username = request.getParameter("username");
System.out.println(username);
response.getWriter().write(username);
}
@Override
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
this.doPost(request, response);
}
}
<%--
Created by IntelliJ IDEA.
User: Zuoyueer
Date: 2019/10/27
Time: 23:15
To change this template use File | Settings | File Templates.
--%>
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
<title>表单提交敏感词</title>
</head>
<body>
<form action="demo_01">
<textarea name="username"></textarea>
<input type="submit" value="提交">
</form>
</body>
</html>
words.txt
:自定义敏感词库
你妈的
王八蛋
草泥马
说下我发这篇文章的原因,是因为我写这个需求的时候,遇到了一个巨坑:我在敏感词库文件中后面加了空行,导致空行存储到了set集合中,而空行在set集合遍历的最前面,导致替换敏感词失败
我真的是个大傻逼,这种低级错误, 特此谨记:手贱别回车换多余空行!