io.leopard.web.security.xss.XssCheckerUrlImpl Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of web4j-nobug Show documentation

The newest version!

package io.leopard.web.security.xss;

import java.util.regex.Matcher;
import java.util.regex.Pattern;

import org.apache.commons.lang.StringUtils;

public class XssCheckerUrlImpl implements XssChecker {
	private static XssChecker instance = new XssCheckerUrlImpl();

	public static XssChecker getInstance() {
		return instance;
	}

	private static Pattern pattern = Pattern.compile("[<>'\"]");

	@Override
	public boolean check(String value) {
		value = StringUtils.lowerCase(value);
		
		// FIXME ahai URL合法性判断为完全
		Matcher m = pattern.matcher(value);
		if (m.find()) {
			return true;
		}
		if (value.indexOf("script") != -1) {
			return true;
		}
		return false;
	}

}