Springboot项目拦截前端提交的特殊字符

最近公司提出了一个新的需求，要求拦截所有前端输入框输入的特殊字符，经研究决定用过滤器来拦截。

1、首先写一个拦截器，为了提高效率，首先判断是否是get请求，如果是get请求则只获取URI，判断URI中是否有特殊字符，如果不是get请求，则获取前端传输的json数据。

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.hzbs.usercenter.common.constant.SpecialsConstant;
import com.hzbs.usercenter.common.exception.CustomException;
import com.hzbs.usercenter.common.utils.StringUtils;
import com.hzbs.usercenter.common.utils.URLFilter;
import com.hzbs.usercenter.common.utils.spring.SpringUtils;
import com.hzbs.usercenter.domain.HzbsSysDict;
import com.hzbs.usercenter.service.IHzbsSysDictService;
/**
 * 特殊符号拦截器
 * @author
 *
 */
public class SpecialsInterceptor implements HandlerInterceptor{
	
	 
	
	@Override
    public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o) throws Exception {
		String dictValue = "<>?''/？";
		if(StringUtils.isEmpty(dictValue)){
			return true;
		}
		String reg = "["+dictValue+"]{1,}";
		if("GET".equals(httpServletRequest.getMethod())){
			if(URLFilter.checkSpecials(httpServletRequest.getQueryString(),reg)){
	        	throw new CustomException("url中包含特殊字符"+dictValue);
	        }
		}else{
			if(URLFilter.checkSpecials(httpServletRequest,reg)){
	        	throw new CustomException("你提交的数据中包含特殊 "+dictValue);
	        }
		}
		
        return true;
    }
 
    @Override
    public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, ModelAndView modelAndView) throws Exception {
       
    }
 
    @Override
    public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse,