cn.hutool.http

Class HTMLFilter

java.lang.Object

cn.hutool.http.HTMLFilter

public final class HTMLFilter
extends Object

HTML过滤器，用于去除XSS(Cross Site Scripting) 漏洞隐患。

此类中的方法非线程安全

     String clean = new HTMLFilter().filter(input);
 

此类来自：http://xss-html-filter.sf.net

Author:

Joseph O'Connell, Cal Hendersen, Michael Semb Wever

Constructor Summary

Constructors

Constructor and Description
HTMLFilter() Default constructor.
HTMLFilter(boolean debug) Set debug flag to true.
HTMLFilter(Map<String,Object> conf) Map-parameter configurable constructor.

Method Summary

Modifier and Type	Method and Description
static String	chr(int decimal)
String	filter(String input) given a user submitted input String, filter out any invalid or restricted html.
static String	htmlSpecialChars(String s)
boolean	isAlwaysMakeTags()
boolean	isStripComments()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HTMLFilter

public HTMLFilter()

Default constructor.

HTMLFilter

public HTMLFilter(boolean debug)

Set debug flag to true. Otherwise use default settings. See the default constructor.

Parameters:

debug - turn debug on with a true argument

HTMLFilter

public HTMLFilter(Map<String,Object> conf)

Map-parameter configurable constructor.

Parameters:

conf - map containing configuration. keys match field names.

Method Detail

chr

public static String chr(int decimal)

htmlSpecialChars

public static String htmlSpecialChars(String s)

filter

public String filter(String input)

given a user submitted input String, filter out any invalid or restricted html.

Parameters:

input - text (i.e. submitted by a user) than may contain html

Returns:

"clean" version of input, with only valid, whitelisted html elements allowed

isAlwaysMakeTags

public boolean isAlwaysMakeTags()

isStripComments

public boolean isStripComments()