java防止html注入_JAVA防止JS html 注入

public class HtmlEncode {

public static String htmlEncode(String string) {

if(null == string || "".equals(string))

return null;

else{

String result = string;

result = result.replaceAll("&", "&");

result = result.replaceAll("

result = result.replaceAll(">", ">");

result = result.replaceAll("\"", """);

return (result.toString());

}

}

public static String htmlDecode(String string) {

if(null == string || "".equals(string))

return null;

else{

String result = string;

result = result.replaceAll("&", "&");

result = result.replaceAll("

result = result.replaceAll(">", ">");

result = result.replaceAll(""", "\"");

return (result.toString());

}

}

/*public static void main(String[] args) {

System.out.println(HtmlEncode.htmlEncode("  "));

System.out.println(HtmlEncode.htmlDecode("  "));

}*/

}