29 lines
923 B
Java
29 lines
923 B
Java
|
package cn.palmte.work.security;
|
|||
|
|
|
|||
|
|
import top.jfunc.common.utils.StrUtil;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 框架注入漏洞
|
|||
|
|
* https://blog.csdn.net/conkeyn/article/details/84532040
|
|||
|
|
* @author xiongshiyan at 2021/9/6 , contact me with email yanshixiong@126.com or phone 15208384257
|
|||
|
|
*/
|
|||
|
|
public class UrlUtil {
|
|||
|
|
private static final String REG_EX="[\n`~!@#$%^&*\\(\\)+|;{}',\\\\\\[\\]<>/?~！@#￥%……&*（）——+|{}【】‘；：”“’。， 、？]";
|
|||
|
|
|
|||
|
|
public static String replaceSpecialChar(String origin){
|
|||
|
|
if(StrUtil.isEmpty(origin)){
|
|||
|
|
return origin;
|
|||
|
|
}
|
|||
|
|
String s = origin.replaceAll(REG_EX, "");
|
|||
|
|
//双引号不好写在正则中
|
|||
|
|
return s.replace("\"", "");
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public static void main(String[] args) {
|
|||
|
|
String origin = "12|&;$%@'\"<>()+,\\";
|
|||
|
|
System.out.println(origin);
|
|||
|
|
String s = replaceSpecialChar(origin);
|
|||
|
|
System.out.println(s);
|
|||
|
|
}
|
|||
|
|
}
|