laravel防止XSS攻击(中间件使用)

首先，创建中间件：
php artisan make:middleware XSS

其次，修改app/Http/Middleware/XSS.php文件：

XSS.php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
class XSS
{
    public function handle(Request $request, Closure$next)
    {
        $input = $request->all();
        array_walk_recursive($input,function(&$input) {
            $input = strip_tags($input);
        });
        $request->merge($input);
        return $next($request);
    }
}

然后，必须在app/Http/Kernel.php文件中注册中间件：

Kernel.php
class Kernel extends HttpKernel
{
    ....
    protected $routeMiddleware = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        ....
        'XSS' => \App\Http\Middleware\XSS::class,
    ];
}

最后，在路由中增加**‘middleware’ => [‘XSS’]**：

Route::group(['namespace'=>'Home','middleware' => ['XSS']],function(){  Route::post('customValiPost','CustomValDemoController@customValiPost');
});