谢彬のCSDN专栏

如果是通过"test.jsp?param=中文"传递参数,则需要:      a.在传参数之前先把参数进行转码:java.net.URLEncoder.encode(param);        取值用java.net.URLDncoder.decode(param);再转回中文      b.在你的Tomcat目录-->conf目录-->server.xml里找出这段:     

XSSFilter.javapublic void doFilter(ServletRequest servletrequest, ServletResponse servletresponse, FilterChain filterchain) throws IOException, ServletException { //flag = true 只做URL验证;