上传后台管理系统代码

novel-admin/src/main/java/com/java2nb/common/xss/XssStringJsonSerializer.java

@@ -0,0 +1,28 @@
+package com.java2nb.common.xss;
+
+import com.fasterxml.jackson.core.JsonGenerator;
+import com.fasterxml.jackson.databind.JsonSerializer;
+import com.fasterxml.jackson.databind.SerializerProvider;
+import org.apache.commons.text.StringEscapeUtils;
+
+import java.io.IOException;
+
+public class XssStringJsonSerializer extends JsonSerializer<String> {
+
+    @Override
+    public Class<String> handledType() {
+        return String.class;
+    }
+
+    /**
+     * 假如有html代码是自己传来的,需要设定对应的name,不走StringEscapeUtils.escapeHtml4(value)过滤
+     */
+    @Override
+    public void serialize(String value, JsonGenerator jsonGenerator, SerializerProvider serializerProvider)
+            throws IOException {
+        if (value != null) {
+            String encodedValue = StringEscapeUtils.escapeHtml4(value);
+            jsonGenerator.writeString(encodedValue);
+        }
+    }
+}