xss过滤器

src/main/java/com/xwolf/boot/config/FilterConfig.java

@@ -0,0 +1,29 @@
+package com.xwolf.boot.config;
+
+import com.xwolf.boot.interceptor.XSSFilter;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * Filter注册
+ * @author xwolf
+ * @version 1.0
+ * @since 1.8
+ */
+@Configuration
+public class FilterConfig {
+
+    private static final String[] URLS = {"/user/*"};
+
+    @Bean
+    public FilterRegistrationBean filterRegistrationBean(){
+
+        FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean();
+        filterRegistrationBean.setFilter(new XSSFilter());
+        filterRegistrationBean.addUrlPatterns(URLS);
+        filterRegistrationBean.setName("XSSFilter");
+        filterRegistrationBean.setOrder(1);
+        return filterRegistrationBean;
+    }
+}

src/main/java/com/xwolf/boot/interceptor/CsrfInterceptor.java

@@ -15,6 +15,7 @@ import java.util.Arrays;
  * @version 1.0
  * @since 1.8
  */
+
 @Slf4j
 public class CsrfInterceptor implements HandlerInterceptor {
 
@@ -28,7 +29,8 @@ public class CsrfInterceptor implements HandlerInterceptor {
         String userAgent = request.getHeader("User-Agent");
         //此处仅处理referer
         String referer = request.getHeader("Referer");
-        log.info("preHandle request agent={}, referer={}",userAgent,referer);
+        String url = request.getRequestURI();
+        log.info("preHandle request agent={}, referer={},URI={}",userAgent,referer,url);
         boolean contains = true ;
         if ( StringUtils.isNotBlank(referer) ){
 

src/main/java/com/xwolf/boot/interceptor/XSSFilter.java

@@ -5,6 +5,7 @@ import javax.servlet.http.HttpServletRequest;
 import java.io.IOException;
 
 /**
+ * XSS过滤器
  * @author xwolf
  * @since 1.8
  */