servlet防盗链

package cn.itcast.web.tag; import java.io.IOException; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.jsp.JspException; import javax.servlet.jsp.PageContext; import javax.servlet.jsp.SkipPageException; import javax.servlet.jsp.tagext.SimpleTagSupport; public class RefererTag extends SimpleTagSupport {  private String site;  private String page;  public void setSite(String site) {   this.site = site;  }  public void setPage(String page) {   this.page = page;  }      @Override  public void doTag() throws JspException, IOException {   //看来访问者是从哪个页面来的   PageContext pageContext = (PageContext)this.getJspContext();   HttpServletRequest request = (HttpServletRequest) pageContext.getRequest();   String referer = request.getHeader("referer");  // http://www.sina.com/index.html      //判断   if(referer==null || !referer.startsWith(site)){    HttpServletResponse response = (HttpServletResponse) pageContext.getResponse();    String webroot = request.getContextPath();  //day11_example    if(page.startsWith(webroot)){     response.sendRedirect(page);    }else{     response.sendRedirect(webroot + page);    }    //重定向后，控制保护的页面不要执行    throw new SkipPageException();     }        }       }