请编写一个类,该类使用HttpServletRequest对象的getHeader(“referer”)方法实现下载资源防盗链的功能
在实际开发中,经常会使用referer头字段,一些站点为吸引人气经常会为了提高站点的访问量,提供各种软件的下载页面,他们本身没有这些资源,只是将下载的超链接指向其他站点的资源。为防止这种盗链,就需要检查请求来源,只接受本站点链接发送的下载请求,防止其他站点链接的下载请求。这个时候需要通过Referer请求头来防止盗链。
以下为举例说明:
例子的主体框架:
DownManagerServlet.java方法:
package test;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class DownManagerServlet extends HttpServlet {
public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
response.setContentType("text/html;charset=utf-8");
PrintWriter out = response.getWriter();
//获取referer头的值
String referer = request.getHeader("referer");
//获取访问地址
String sitePart = "http://"+request.getServerName();
//判断referer头是否为空,这个头的首地址是否以sitePart开始的
if(referer !=null && referer.startsWith(sitePart))
{
//处理正在下载的请求
out.println("dealing download~");
}else
{
//非法下载请求跳转到down.html页面
RequestDispatcher rd = request.getRequestDispatcher("/down.html");
rd.forward(request, response);
}
}
public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
doGet(request, response);
}
}
down.html
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Insert title here</title>
</head>
<body>
<a href="/Test/DownManagerServlet">download</a>
</body>
</html>
web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
<display-name>HelloServlet</display-name>
<servlet>
<servlet-name>DownManagerServlet</servlet-name>
<servlet-class>test.DownManagerServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>DownManagerServlet</servlet-name>
<url-pattern>/DownManagerServlet</url-pattern>
</servlet-mapping>
</web-app>
第一次访问代码如下:
第二次访问代码如下: