一个简单的过滤器，防止未登录的情况下操作web网页

package cn.itcast.travel.web.filter;

import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;

@WebFilter("/*")
public class LoginFilter implements Filter {
public void destroy() {
}

public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws ServletException, IOException {
    HttpServletRequest request = (HttpServletRequest) req;
    String uri = request.getRequestURI();
    if (uri.contains("/css") || uri.contains("/error") || uri.contains("/fonts")
            || uri.contains("/images") || uri.contains("/img") || uri.contains("/js")
            || uri.contains("/login.html") || uri.contains("register.html")){
        chain.doFilter(req,resp);
    } else {
        Object user = request.getSession().getAttribute("user");
        if (user == null){
            request.getRequestDispatcher("/login.html").forward(request,resp);
        } else {
            //已经登录
            chain.doFilter(req, resp);
        }
    }

    chain.doFilter(req, resp);
}

public void init(FilterConfig config) throws ServletException {

}

}