优化xss过滤后格式出现的异常

RuoYi

2022-08-07 d0f399a66a06376b441d0e9107bb6201821c4910

 ruoyi-common/src/main/java/com/ruoyi/common/utils/html/HTMLFilter.java

@@ -131,7 +131,7 @@
        vAllowedEntities = new String[] { "amp", "gt", "lt", "quot" };

        stripComment = true;

        encodeQuotes = true;

        alwaysMakeTags = true;

        alwaysMakeTags = false;

    }



    /**

@@ -208,7 +208,7 @@


        s = processRemoveBlanks(s);



        s = validateEntities(s);

        // s = validateEntities(s);



        return s;

    }

@@ -245,6 +245,7 @@
            // try and form html

            //

            s = regexReplace(P_END_ARROW, "", s);

            // 不追加结束标签

            s = regexReplace(P_BODY_TO_END, "<$1>", s);

            s = regexReplace(P_XML_CONTENT, "$1<$2", s);



@@ -331,7 +332,7 @@
            final String name = m.group(1).toLowerCase();

            if (allowed(name))

            {

                if (false == inArray(name, vSelfClosingTags))

                if (!inArray(name, vSelfClosingTags))

                {

                    if (vTagCounts.containsKey(name))

                    {

@@ -386,7 +387,7 @@
                        {

                            paramValue = processParamProtocol(paramValue);

                        }

                        params.append(' ').append(paramName).append("=\"").append(paramValue).append("\"");

                        params.append(' ').append(paramName).append("=\\\"").append(paramValue).append("\\\"");

                    }

                }