io.leopard.web.mvc.JsonpUtil Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of web4j-view Show documentation

The newest version!

package io.leopard.web.mvc;

import io.leopard.web.mvc.util.RequestUtil;

import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang.StringUtils;

public class JsonpUtil {

	private static String CALLBACK_REGEX = "^[a-zA-Z0-9_\\.]+$";

	protected static boolean isValidCallback(String callback) {
		return callback.matches(CALLBACK_REGEX);
	}

	private static List ERROR_DIR = new ArrayList();
	static {
		ERROR_DIR.add("/admin/");// TODO ahai 管理目录是用户自定义的，写死会有问题，这是临时方案
		ERROR_DIR.add("/webservice/");
	}

	/**
	 * 是否禁止使用jsonp或script的目录?
	 * 
	 * @param request
	 * @return
	 */
	public static boolean isDenyFolder(HttpServletRequest request) {
		String uri = RequestUtil.getRequestContextUri(request);

		for (String dir : ERROR_DIR) {
			if (uri.startsWith(dir)) {
				return true;
			}
		}
		return false;
	}

	public static void checkCallback(String callback) {
		if (StringUtils.isEmpty(callback)) {
			throw new IllegalArgumentException("参数callback不能为空.");
		}
		if (!isValidCallback(callback)) {
			throw new IllegalArgumentException("非法callback.");
		}
	}

	public static void checkVar(String var) {
		if (StringUtils.isEmpty(var)) {
			throw new IllegalArgumentException("参数var不能为空.");
		}
		if (!isValidCallback(var)) {
			throw new IllegalArgumentException("非法var参数值.");
		}
	}

	// protected static String filter(String content) {
	// content = content.replace("<", "");
	// content = content.replace(">", "");
	// return content;
	// }
}