xss

 

using System.Text.RegularExpressions;
using System.Web;
using System.Web.Mvc;
using DonvvTools.Log;

namespace Test.Framework.Filters
{
    /// <summary>
    /// 防止SXX攻击过滤器
    /// </summary>
    public class SafeFilter : ActionFilterAttribute
    {
        private const string strRegex = @"<[^>]+?style=[\w]+?:expression\(|\b(alert|confirm|prompt)\b|^\+/v(8|9)|<[^>]*?=[^>]*?&#[^>]*?>|\b(and|or)\b.{1,6}?(=|>|<|\bin\b|\blike\b)|/\*.+?\*/|<\s*script\b|<\s*img\b|\bEXEC\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\s+(TABLE|DATABASE)"; 
        private static bool _verify = true;
        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            var request = HttpContext.Current.Request;
            if ((request.Cookies != null && !VerifyCookie())
                || (request.HttpMethod.ToUpper() == "GET" && !VerifyGetData())
                || (request.HttpMethod.ToUpper() == "POST" && !VerifyPostData())
                || !VerifyReferrer())
                filterContext.Result = new RedirectResult($"/Account/Login");
        }

        public static bool VerifyPostData()
        {
            for (int i = 0; i < HttpContext.Current.Request.Form.Count; i++)
            {
                _verify = CheckData(HttpContext.Current.Request.Form[i].ToString());
                if (!_verify)
                    break;
            }
            return _verify;
        }
        
        public static bool VerifyGetData()
        {
            for (int i = 0; i < HttpContext.Current.Request.QueryString.Count; i++)
            {
                _verify = CheckData(HttpContext.Current.Request.QueryString[i].ToString());
                if (!_verify)
                    break;
            }
            return _verify;
        }
        public static bool VerifyCookie()
        {
            for (int i = 0; i < HttpContext.Current.Request.Cookies.Count; i++)
            {
                _verify = CheckData(HttpContext.Current.Request.Cookies[i].Value.ToLower());
                if (!_verify)
                    break;
            }
            return _verify;
        }
        public static bool VerifyReferrer() => CheckData(HttpContext.Current.Request.UrlReferrer.ToString());

        public static bool CheckData(string inputData)
        {
            if (Regex.IsMatch(inputData, strRegex))
            {
                Logger.Debug("链接中含恶意字符串", $"请求链接：{HttpContext.Current.Request.RawUrl}");
                return false;
            }
            return true;
        }
    }
}