Example usage for org.springframework.web.multipart MultipartHttpServletRequest getHeaderNames

Introduction

In this page you can find the example usage for org.springframework.web.multipart MultipartHttpServletRequest getHeaderNames.

Prototype

public Enumeration<String> getHeaderNames();

Source Link

Document

Returns an enumeration of all the header names this request contains.

Usage

From source file:com.myhexin.filter.FileMultipartFilter.java

/**
 * //from   w  ww . j  a v a2 s  .  c o  m
 * @param mRequest
 * @return true:??false?
 */
public boolean isIlleageXssParam(MultipartHttpServletRequest mRequest) {

    // headerheader?
    if (XSSSecurityConfig.IS_CHECK_HEADER) {
        Enumeration<String> headerParams = mRequest.getHeaderNames();
        while (headerParams.hasMoreElements()) {
            String headerName = headerParams.nextElement();
            String headerValue = mRequest.getHeader(headerName);
            if (XSSSecurityManager.matches(headerValue)) {
                recordXssRequestInfo(mRequest, headerValue);
                return true;
            }
        }
        return false;
    }

    // parameterparameter?
    if (XSSSecurityConfig.IS_CHECK_PARAMETER) {
        Map<String, Object> submitParams = mRequest.getParameterMap();
        Set<String> submitNames = submitParams.keySet();
        for (String submitName : submitNames) {
            Object submitValues = submitParams.get(submitName);
            if (submitValues instanceof String) {
                if (XSSSecurityManager.matches((String) submitValues)) {
                    recordXssRequestInfo(mRequest, submitName + "=" + submitValues);
                    return true;
                }
            } else if (submitValues instanceof String[]) {
                for (String submitValue : (String[]) submitValues) {
                    if (XSSSecurityManager.matches((String) submitValue)) {
                        recordXssRequestInfo(mRequest, submitName + "" + submitValue);
                        return true;
                    }
                }
            }
        }
        return false;
    }
    return false;
}

---