java web笔记之Filter防盗链

最新推荐文章于 2024-04-19 05:15:35 发布

dawei_wxw

最新推荐文章于 2024-04-19 05:15:35 发布

阅读量1k

点赞数

分类专栏： java 文章标签： filter 防盗链

本文链接：https://blog.csdn.net/wangxuewei111/article/details/44523361

版权

java 专栏收录该内容

14 篇文章 0 订阅

订阅专栏

本文介绍了Java Web中Filter的使用，重点探讨了如何利用Filter实现网站资源的防盗链功能，保护网站内容不被非法引用。

摘要由CSDN通过智能技术生成

1.防盗链简介

防盗链Filter实现这样一种效果，如果其他网站引用本网站的图片资源，将会显示一个错误图片。只有本站内的网页引用时，图片才会正常显示。即在图片显示之前对request进行验证，看客户请求是否来自本网站内，代码如下。

package com.wang.indentity;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Servlet Filter implementation class myFilter
 */
@WebFilter("/myFilter")
public class imageRedirectFilter implements Filter {

    /**
     * Default constructor. 
     */
    public imageRedirectFilter() {
        // TODO Auto-generated constructor stub
    }

	/**
	 * @see Filter#destroy()
	 */
	public void destroy() {
		// TODO Auto-generated method stub
	}

	/**
	 * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
	 */
	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
		HttpServletRequest req = (HttpServletRequest) request;
		HttpServletResponse res = (HttpServletResponse) response;
		String referer = req.getHeader("referer");
		System.out.println("referer=="+referer);
		System.out.println("req.getServerName()=="+req.getServerName());
		System.out.println("req.getServerName()=="+(referer == null || !referer.contains(req.getServerName())));
		if(referer == null || !referer.contains(req.getServerName())){
			req.getRequestDispatcher("/images/error.gif").forward(req, res);
		}else{
			chain.doFilter(req, res);
		}
	}

	/**
	 * @see Filter#init(FilterConfig)
	 */
	public void init(FilterConfig fConfig) throws ServletException {
		// TODO Auto-generated method stub
	}

}

<%@ page language="java" contentType="text/html; charset=utf-8"
    pageEncoding="utf-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Insert title here</title>

</head>
<body>


<a href="images/success.jpg" >正确访问</a>
</body>
</html>

直接在浏览器上输入网址访问会显示错误图片

从jsp访问会显示正确图片