|
|
|
@ -1,5 +1,6 @@
|
|
|
|
|
package com.ruoyi.common.xss;
|
|
|
|
|
|
|
|
|
|
import com.ruoyi.common.utils.StringUtils;
|
|
|
|
|
import javax.validation.ConstraintValidator;
|
|
|
|
|
import javax.validation.ConstraintValidatorContext;
|
|
|
|
|
import java.util.regex.Matcher;
|
|
|
|
@ -12,15 +13,19 @@ import java.util.regex.Pattern;
|
|
|
|
|
*/
|
|
|
|
|
public class XssValidator implements ConstraintValidator<Xss, String>
|
|
|
|
|
{
|
|
|
|
|
private final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />";
|
|
|
|
|
private static final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />";
|
|
|
|
|
|
|
|
|
|
@Override
|
|
|
|
|
public boolean isValid(String value, ConstraintValidatorContext constraintValidatorContext)
|
|
|
|
|
{
|
|
|
|
|
if (StringUtils.isBlank(value))
|
|
|
|
|
{
|
|
|
|
|
return true;
|
|
|
|
|
}
|
|
|
|
|
return !containsHtml(value);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public boolean containsHtml(String value)
|
|
|
|
|
public static boolean containsHtml(String value)
|
|
|
|
|
{
|
|
|
|
|
Pattern pattern = Pattern.compile(HTML_PATTERN);
|
|
|
|
|
Matcher matcher = pattern.matcher(value);
|
|
|
|
|