Java过滤器中
public void doFilter(ServletRequest request, ServletResponse response,
FilterChain chain) throws IOException, ServletException {
HttpServletRequest req=(HttpServletRequest) request;
// http host头攻击漏洞校验
HttpServletResponse res = (HttpServletResponse) response;
String requestHost = req.getHeader("host");
if (requestHost != null && isRightHost(requestHost)){
res.setStatus(403);
return;
}
chain.doFilter(request, response);
}
// http host头漏洞攻击判断
public boolean isRightHost(String requestHost){
if(requestHost.indexOf("www.xxx.com") == -1 && requestHost.indexOf("服务器IP") == -1) {
return true;
}
return false;
}