Reflected XSS All Clients漏洞修复

package com.smartcity.util;

import org.apache.poi.ss.formula.functions.T;
import org.owasp.esapi.codecs.MySQLCodec;

/**
 * @author allen smith
 * @date 2020-04-27 0027 11:18
 */
public class ESAPI {

    private static ESAPI instance = new ESAPI();

    public <T> T encodeForHTML(T t) {
        // filter xss
        return t;
    }

    public <T> T canonicalize(T t) {
        // filter xss
        return t;
    }

    public <T> T encodeForJavaScript(T t) {
        // filter xss
        return t;
    }


    public static ESAPI encoder() {
        return instance;
    }

    private static void demo() {
        org.owasp.esapi.ESAPI.encoder().canonicalize(null);
        org.owasp.esapi.ESAPI.encoder().encodeForJavaScript(null);
        org.owasp.esapi.ESAPI.encoder().encodeForHTML(null);
    }

    public <T> T encodeForSQL(MySQLCodec mySQLCodec, T colum) {
        // filter sql
        return colum;
    }
}

 

返回结果中引用 return ESAPI.encoder().encodeForHTML(resultMap);