1.新加过滤器,拦截request,new对象importcn.hutool.core.util.ObjectUtil;importcn.hutool.http.HtmlUtil;importjava.util.Map;importjavax.servlet.http.HttpServletRequest;importjavax.servlet.http.HttpServletRequestWrapper;importorg.springframework.web.util.HtmlUtils;publicclassXssHttpServletRequestWrapperextendsHttpServletRequestWrapper{privatefinalMapString,String[]queryParameters;publicXssHttpServletRequestWrapper(HttpServletRequestservletRequest){super(servletRequest);this.queryParametersservletRequest.getParameterMap();}publicString[]getParameterValues(Stringparameter){String[]valuessuper.getParameterValues(parameter);if(ObjectUtil.isEmpty(values)){returnvalues;}else{String[]encodedValuesnewString[values.length];for(inti0;ivalues.length;i){encodedValues[i]HtmlUtil.filter(values[i]);if(!values[i].equals(encodedValues[i])){System.out.println(getParameterValues FILTER VALUE [values[i],encodedValues[i]]);}}returnencodedValues;}}publicStringgetParameter(Stringparameter){Stringvaluesuper.getParameter(parameter);StringnewValueObjectUtil.isEmpty(value)?value:HtmlUtil.filter(value);if(!ObjectUtil.equals(value,newValue)){System.out.println(getParameter FILTER VALUE [value,newValue]);}returnnewValue;}publicStringgetHeader(Stringname){Stringvaluesuper.getHeader(name);StringnewValueObjectUtil.isEmpty(value)?value:HtmlUtil.filter(value);if(!ObjectUtil.equals(value,newValue)){System.out.println(getHeader FILTER VALUE [value,newValue]);}returnnewValue;}publicStringgetQueryString(){StringBuilderqueryStringnewStringBuilder();for(Map.EntryString,String[]entry:queryParameters.entrySet()){Stringnameentry.getKey();String[]valuesentry.getValue();if(values!null){for(inti0;ivalues.length;i){Stringvaluevalues[i];if(i0){queryString.append(name);queryString.append();queryString.append(HtmlUtils.htmlEscape(value));}else{queryString.append();queryString.append(name);queryString.append();queryString.append(HtmlUtils.htmlEscape(value));}}}}System.out.println(getQueryStringqueryString.toString());returnqueryString.toString();}}