From 25ea8f8ed602656d3eabf4cf535dd8b1f463a447 Mon Sep 17 00:00:00 2001
From: xwolf <2324808561@qq.com>
Date: Tue, 27 Mar 2018 13:32:24 +0800
Subject: [PATCH] =?UTF-8?q?xss=E8=BF=87=E6=BB=A4=E5=99=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../com/xwolf/boot/config/FilterConfig.java   | 29 +++++++++++++++++++
 .../boot/interceptor/CsrfInterceptor.java     |  4 ++-
 .../com/xwolf/boot/interceptor/XSSFilter.java |  1 +
 3 files changed, 33 insertions(+), 1 deletion(-)
 create mode 100644 src/main/java/com/xwolf/boot/config/FilterConfig.java

diff --git a/src/main/java/com/xwolf/boot/config/FilterConfig.java b/src/main/java/com/xwolf/boot/config/FilterConfig.java
new file mode 100644
index 0000000..80ada68
--- /dev/null
+++ b/src/main/java/com/xwolf/boot/config/FilterConfig.java
@@ -0,0 +1,29 @@
+package com.xwolf.boot.config;
+
+import com.xwolf.boot.interceptor.XSSFilter;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * Filter注册
+ * @author xwolf
+ * @version 1.0
+ * @since 1.8
+ */
+@Configuration
+public class FilterConfig {
+
+    private static final String[] URLS = {"/user/*"};
+
+    @Bean
+    public FilterRegistrationBean filterRegistrationBean(){
+
+        FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean();
+        filterRegistrationBean.setFilter(new XSSFilter());
+        filterRegistrationBean.addUrlPatterns(URLS);
+        filterRegistrationBean.setName("XSSFilter");
+        filterRegistrationBean.setOrder(1);
+        return filterRegistrationBean;
+    }
+}
diff --git a/src/main/java/com/xwolf/boot/interceptor/CsrfInterceptor.java b/src/main/java/com/xwolf/boot/interceptor/CsrfInterceptor.java
index 5152da0..8303e88 100644
--- a/src/main/java/com/xwolf/boot/interceptor/CsrfInterceptor.java
+++ b/src/main/java/com/xwolf/boot/interceptor/CsrfInterceptor.java
@@ -15,6 +15,7 @@ import java.util.Arrays;
  * @version 1.0
  * @since 1.8
  */
+
 @Slf4j
 public class CsrfInterceptor implements HandlerInterceptor {
 
@@ -28,7 +29,8 @@ public class CsrfInterceptor implements HandlerInterceptor {
         String userAgent = request.getHeader("User-Agent");
         //此处仅处理referer
         String referer = request.getHeader("Referer");
-        log.info("preHandle request agent={}, referer={}",userAgent,referer);
+        String url = request.getRequestURI();
+        log.info("preHandle request agent={}, referer={},URI={}",userAgent,referer,url);
         boolean contains = true ;
         if ( StringUtils.isNotBlank(referer) ){
 
diff --git a/src/main/java/com/xwolf/boot/interceptor/XSSFilter.java b/src/main/java/com/xwolf/boot/interceptor/XSSFilter.java
index 5eb5ce6..c9d2b6a 100644
--- a/src/main/java/com/xwolf/boot/interceptor/XSSFilter.java
+++ b/src/main/java/com/xwolf/boot/interceptor/XSSFilter.java
@@ -5,6 +5,7 @@ import javax.servlet.http.HttpServletRequest;
 import java.io.IOException;
 
 /**
+ * XSS过滤器
  * @author xwolf
  * @since 1.8
  */