mirror of https://gitee.com/y_project/RuoYi.git
commit
eb0602033d
|
@ -12,15 +12,18 @@ import java.util.regex.Pattern;
|
||||||
*/
|
*/
|
||||||
public class XssValidator implements ConstraintValidator<Xss, String>
|
public class XssValidator implements ConstraintValidator<Xss, String>
|
||||||
{
|
{
|
||||||
private final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />";
|
private static final String HTML_PATTERN = "<(\\S*?)[^>]*>.*?|<.*? />";
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public boolean isValid(String value, ConstraintValidatorContext constraintValidatorContext)
|
public boolean isValid(String value, ConstraintValidatorContext constraintValidatorContext)
|
||||||
{
|
{
|
||||||
|
if (StringUtils.isBlank(value)){
|
||||||
|
return true;
|
||||||
|
}
|
||||||
return !containsHtml(value);
|
return !containsHtml(value);
|
||||||
}
|
}
|
||||||
|
|
||||||
public boolean containsHtml(String value)
|
public static boolean containsHtml(String value)
|
||||||
{
|
{
|
||||||
Pattern pattern = Pattern.compile(HTML_PATTERN);
|
Pattern pattern = Pattern.compile(HTML_PATTERN);
|
||||||
Matcher matcher = pattern.matcher(value);
|
Matcher matcher = pattern.matcher(value);
|
||||||
|
|
Loading…
Reference in New Issue