【Java Web】使用Filter实现评论敏感词过滤

由于本人最近在做的本科毕业设计功能模块里有评论区板块，所以，不可避免的需要实现评论敏感词过滤功能。我的初步思路是通过拦截用户提交的请求，然后将请求中的用户评论内容与数据库中的敏感词汇表比对，从而实现对请求中的用户评论内容进行过滤，并进一步将敏感词部分逐一替换。通过查阅资料后，我发现了Servlet API 中提供了一个Filter接口，通过实现该接口便可以实现用户在访问某个目标资源之前，对访问的请求和响应进行拦截和增加功能。经过调试，该功能已实现，具体实现如下：

SensitiveWord.java

public class SensitiveWord {
    private String sensitiveId;
    private String sensitiveWord;

    public String getSensitiveId() {
        return sensitiveId;
    }

    public void setSensitiveId(String sensitiveId) {
        this.sensitiveId = sensitiveId;
    }

    public String getSensitiveWord() {
        return sensitiveWord;
    }

    public void setSensitiveWord(String sensitiveWord) {
        this.sensitiveWord = sensitiveWord;
    }
}

 

SensitiveWordDao.java

public interface SensitiveWordDao {
    public List<SensitiveWord> querySensitiveWordAll();
}

SensitiveWordDaoImpl.java

public class SensitiveWordDaoImpl implements SensitiveWordDao {
    private Connection conn;
    private PreparedStatement pstmt;
    private ResultSet rs;


    @Override
    public List<SensitiveWord> querySensitiveWordAll() {
        List<SensitiveWord> sensitiveWordList = new ArrayList<SensitiveWord>();
        String sql="SELECT * FROM `sensitive`";
        try{
            conn = DBUtil.getConnection();
            pstmt = conn.prepareStatement(sql);
            rs = pstmt.executeQuery();
            while(rs.next()) {
                SensitiveWord sensitiveWord = new SensitiveWord();
                sensitiveWord.setSensitiveId(rs.getString("sensitive_id"));
                sensitiveWord.setSensitiveWord(rs.getString("sensitive_word"));
                sensitiveWordList.add(sensitiveWord);
            }
        }catch (SQLException e){
            e.printStackTrace();
        }finally {
            DBUtil.close(conn);
        }
        return sensitiveWordList;
    }
}

SensitiveWordFilter.java

public class SensitiveWordFilter implements Filter {
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void destroy() {

    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        servletRequest.setCharacterEncoding("utf-8");
        MyRequest req = new MyRequest((HttpServletRequest)servletRequest);
        filterChain.doFilter(req, servletResponse);
    }
}
class MyRequest extends HttpServletRequestWrapper {
    public MyRequest(HttpServletRequest request) {
        super(request);
    }

    @Override
    public String getParameter(String name) {
        //使用工厂模式，解耦
        SensitiveWordDao sensitiveWordDao = DaoFactory.instance().getSensitiveWordDao();
        String str = super.getParameter(name);
        List<String> list=new ArrayList<String>();
        List<SensitiveWord> sensitiveWordList=sensitiveWordDao.querySensitiveWordAll();
        for (SensitiveWord sensitiveWord : sensitiveWordList){
            list.add(sensitiveWord.getSensitiveWord());
        }
        for(String word : list){
            str = str.replaceAll(word, "*");
        }
        return str;
    }



}

CommentController.java

public class CommentController extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doPost(req, resp);
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        req.setCharacterEncoding("UTF-8");
        resp.setCharacterEncoding("UTF-8");
        CommentDao commentDao = DaoFactory.instance().getCommentDao();
        SimpleDateFormat df = new SimpleDateFormat("yyyyMMddHHmmss");
        SimpleDateFormat df1 = new SimpleDateFormat("yyyy-MM-dd");
        String uId13=req.getParameter("uId");
        //获取评论内容
        String commentText=req.getParameter("comment_text");
        Date day3=new Date();
        String cId='C'+df.format(day3);
        String datetime1=df1.format(day3);
        if(commentText.equals("")){
            resp.setContentType("text/html;charset=utf-8");
            resp.getWriter().write("<script>alert('不能发送空白内容！');</script>");
        }else {
            //将评论内容插入数据库评论表
            Comment comment = new Comment();
            comment.setCommentId(cId);
            comment.setuId(uId13);
            comment.setContent(commentText);
            comment.setDatetime(datetime1);
            commentDao.addComment(comment);
        }

    }
}

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
         version="4.0">
    <display-name>web_reading</display-name>
   

    <servlet>
        <servlet-name>commentController</servlet-name>
        <servlet-class>com.read.action.CommentController</servlet-class>
    </servlet>

    <servlet-mapping>
        <servlet-name>commentController</servlet-name>
        <url-pattern>/commentController</url-pattern>
    </servlet-mapping>

    <filter>
        <filter-name>sensitiveWordFilter</filter-name>
        <filter-class>com.read.filter.SensitiveWordFilter</filter-class>
    </filter>
    
    <filter-mapping>
        <filter-name>sensitiveWordFilter</filter-name>
        <!--只过滤该Servlet-->
        <url-pattern>/commentController</url-pattern>
    </filter-mapping>
</web-app>

测试结果：