XSS防御篇

 1 package com.mess.filter;
 2 
 3 public class HtmlFilter {
 4     public static String filter(String html) {
 5         if (html == null) {
 6             return null;
 7         }
 8         StringBuilder sb = new StringBuilder(html.length());
 9         for (int i = 0; i < html.length(); i++) {
10             char c = html.charAt(i);
11             switch (c) {
12             case ‘>‘:
13                 sb.append("&gt;");
14                 break;
15             case ‘<‘:
16                 sb.append("&lt;");
17                 break;
18             case ‘&‘:
19                 sb.append("&amp;");
20                 break;
21             case ‘"‘:
22                 sb.append("&quit;");
23                 break;
24             case ‘\‘‘:
25                 sb.append("&#039;");
26                 break;
27             default:
28                 sb.append(c);
29                 break;
30             }
31         }
32         return sb.toString();
33     }
34 
35      
36 
37 }