knight_black_bob的专栏

校验Referer头，防范CSRF(跨站请求伪造)攻击的拦截器

com.opensymphony.xwork2.ActionInvocation;import com.opensymphony.xwork2.interceptor.AbstractInterceptor;import com.trace.web.utils.Constants;/** * 对管理员操作，校验Referer头，防范CSRF(跨站请求伪造)攻击的拦截器 * @author admin */public class AuthInterceptor extend

解决xss漏洞

spring 拦截器

001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p" xmlns:context="http://www.springframework.org/schema/context" xmlns:oxm="http://www.springframework.org/schema/oxm" xsi:schemaLocation="

struts 拦截器

AuthInterceptor" class="com.fusionability.web.interceptor.TraceAuthInterceptor"></interceptor> <interceptor-stack name="traceAuthInterceptorStack"> <interceptor-r

原创 servlet 消息转发

.sun.com/xml/ns/javaee/jsp" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" version="3.0"&gt

elastic search head 基本用法

ek/bigdeskhttp://192.168.13.140:9200/_plugin/bigdesk  数据查询插件 bin/plugin -install mobz/elasticsearch-headhttp://192.168.13.140:9200/_plugin/head/  理解性：   _index  类似 mysql中 database   _type   类似  mysql 中 table   _ id     类似  mys

struts+spring +jdbctemplate demo

hema-instance" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:javaee="http://java.sun.com/xml/ns/javaee" xmlns:jsp="http://java.sun.com/xml/ns/javaee/jsp" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.x

spring + struts + hibernate demo

LSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">