|
|
|
@ -12,15 +12,18 @@ import java.util.regex.Pattern;
|
|
|
|
|
*/ |
|
|
|
|
public class XssValidator implements ConstraintValidator<Xss, String> |
|
|
|
|
{ |
|
|
|
|
private final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />"; |
|
|
|
|
private static final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />"; |
|
|
|
|
|
|
|
|
|
@Override |
|
|
|
|
public boolean isValid(String value, ConstraintValidatorContext constraintValidatorContext) |
|
|
|
|
{ |
|
|
|
|
if (StringUtils.isBlank(value)){ |
|
|
|
|
return true; |
|
|
|
|
} |
|
|
|
|
return !containsHtml(value); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
public boolean containsHtml(String value) |
|
|
|
|
public static boolean containsHtml(String value) |
|
|
|
|
{ |
|
|
|
|
Pattern pattern = Pattern.compile(HTML_PATTERN); |
|
|
|
|
Matcher matcher = pattern.matcher(value); |
|
|
|
|