\u4e00\u3001 \u6f0f\u6d1e\u63cf\u8ff0
\n1. \u68c0\u6d4b\u5230\u76ee\u6807URL\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e
\n\u5f88\u591aWEB\u5e94\u7528\u4e2d\u90fd\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\u3002SQL\u6ce8\u5165\u662f\u4e00\u79cd\u653b\u51fb\u8005\u5229\u7528\u4ee3\u7801\u7f3a\u9677\u8fdb\u884c\u653b\u51fb\u7684\u65b9\u5f0f\uff0c\u53ef\u5728\u4efb\u4f55\u80fd\u591f\u5f71\u54cd\u6570\u636e\u5e93\u67e5\u8be2\u7684\u5e94\u7528\u7a0b\u5e8f\u53c2\u6570\u4e2d\u5229\u7528\u3002\u4f8b\u5982url\u672c\u8eab\u7684\u53c2\u6570\u3001post\u6570\u636e\u6216cookie\u503c\u3002<\/p>\n
2.\u68c0\u6d4b\u5230\u76ee\u6807URL\u5b58\u5728\u8de8\u7ad9\u6f0f\u6d1e
\n\u8de8\u7ad9\u811a\u672c\u653b\u51fb\uff08\u4e5f\u79f0\u4e3aXSS\uff09\u6307\u5229\u7528\u7f51\u7ad9\u6f0f\u6d1e\u4ece\u7528\u6237\u90a3\u91cc\u6076\u610f\u76d7\u53d6\u4fe1\u606f\u3002\u7528\u6237\u5728\u6d4f\u89c8\u7f51\u7ad9\u3001\u4f7f\u7528\u5373\u65f6\u901a\u8baf\u8f6f\u4ef6\u3001\u751a\u81f3\u5728\u9605\u8bfb\u7535\u5b50\u90ae\u4ef6\u65f6\uff0c\u901a\u5e38\u4f1a\u70b9\u51fb\u5176\u4e2d\u7684\u94fe\u63a5\u3002\u653b\u51fb\u8005\u901a\u8fc7\u5728\u94fe\u63a5\u4e2d\u63d2\u5165\u6076\u610f\u4ee3\u7801\uff0c\u5c31\u80fd\u591f\u76d7\u53d6\u7528\u6237\u4fe1\u606f\u6216\u5728\u7ec8\u7aef\u7528\u6237\u7cfb\u7edf\u4e0a\u6267\u884c\u6076\u610f\u4ee3\u7801\u3002<\/p>\n
3.\u68c0\u6d4b\u5230\u76ee\u6807URL\u5b58\u5728\u6846\u67b6\u6ce8\u5165\u6f0f\u6d1e
\n\u653b\u51fb\u8005\u6709\u53ef\u80fd\u6ce8\u5165\u542b\u6709\u6076\u610f\u5185\u5bb9\u7684 frame \u6216 iframe \u6807\u8bb0\u3002\u5982\u679c\u7528\u6237\u4e0d\u591f\u8c28\u614e\uff0c\u5c31\u6709\u53ef\u80fd\u6d4f\u89c8\u8be5\u6807\u8bb0\uff0c\u5374\u610f\u8bc6\u4e0d\u5230\u81ea\u5df1\u4f1a\u79bb\u5f00\u539f\u59cb\u7ad9\u70b9\u800c\u8fdb\u5165\u6076\u610f\u7684\u7ad9\u70b9\u3002\u4e4b\u540e\uff0c\u653b\u51fb\u8005\u4fbf\u53ef\u4ee5\u8bf1\u5bfc\u7528\u6237\u518d\u6b21\u767b\u5f55\uff0c\u7136\u540e\u83b7\u53d6\u5176\u767b\u5f55\u51ed\u8bc1\u3002<\/p>\n
4.\u68c0\u6d4b\u5230\u76ee\u6807URL\u5b58\u5728\u94fe\u63a5\u6ce8\u5165\u6f0f\u6d1e
\n\u201c\u94fe\u63a5\u6ce8\u5165\u201d\u662f\u4fee\u6539\u7ad9\u70b9\u5185\u5bb9\u7684\u884c\u4e3a\uff0c\u5176\u65b9\u5f0f\u4e3a\u5c06\u5916\u90e8\u7ad9\u70b9\u7684 URL \u5d4c\u5165\u5176\u4e2d\uff0c\u6216\u5c06\u6709\u6613\u53d7\u653b\u51fb\u7684\u7ad9\u70b9\u4e2d\u7684\u811a\u672c \u7684 URL \u5d4c\u5165\u5176\u4e2d\u3002\u5c06 URL \u5d4c\u5165\u6613\u53d7\u653b\u51fb\u7684\u7ad9\u70b9\u4e2d\uff0c\u653b\u51fb\u8005\u4fbf\u80fd\u591f\u4ee5\u5b83\u4e3a\u5e73\u53f0\u6765\u542f\u52a8\u5bf9\u5176\u4ed6\u7ad9\u70b9\u7684\u653b\u51fb\uff0c\u4ee5\u53ca\u653b\u51fb\u8fd9\u4e2a\u6613\u53d7\u653b\u51fb\u7684\u7ad9\u70b9\u672c\u8eab\u3002<\/p>\n
\u4e8c\u3001 \u6f0f\u6d1e\u63cf\u8ff0
\n1. URL\u8fc7\u6ee4\u5668SessionFilter.java
\npackage cn.sh.steven.filter;<\/p>\n
import org.apache.commons.lang.StringUtils;
\nimport org.apache.log4j.Logger;<\/p>\n
import javax.servlet.*;
\nimport javax.servlet.http.HttpServletRequest;
\nimport javax.servlet.http.HttpServletResponse;
\nimport java.io.*;
\nimport java.util.ArrayList;
\nimport java.util.Iterator;
\nimport java.util.Map;<\/p>\n
public class SessionFilter implements Filter {
\nprivate static Logger log = Logger.getLogger(SessionFilter.class);<\/p>\n
public void destroy() { }<\/p>\n
public void doFilter(ServletRequest servletRequest,
\nServletResponse servletResponse, FilterChain filterChain)
\nthrows IOException, ServletException {
\nHttpServletRequest request = (HttpServletRequest) servletRequest;
\nHttpServletResponse response = (HttpServletResponse) servletResponse;
\nString requestStr = getRequestString(request);
\nSystem.out.println(“requestStr\uff1a ======================== ” + requestStr);
\nSystem.out.println(“\u5b8c\u6574\u7684\u5730\u5740\u662f====” + request.getRequestURL().toString());
\nSystem.out.println(“\u63d0\u4ea4\u7684\u65b9\u5f0f\u662f========” + request.getMethod());
\nlog.info(“requestStr\uff1a ======================== ” + requestStr);
\nlog.info(“\u5b8c\u6574\u7684\u5730\u5740\u662f====” + request.getRequestURL().toString());
\nlog.info(“\u63d0\u4ea4\u7684\u65b9\u5f0f\u662f========” + request.getMethod());<\/p>\n
if (“bingo”.equals(guolv2(requestStr)) || “bingo”.equals(guolv2(request.getRequestURL().toString()))) {
\nSystem.out.println(“======\u8bbf\u95ee\u5730\u5740\u53d1\u73b0\u975e\u6cd5\u5b57\u7b26\uff0c\u5df2\u62e6\u622a======”);
\nlog.info(“======\u8bbf\u95ee\u5730\u5740\u53d1\u73b0\u975e\u6cd5\u5b57\u7b26\uff0c\u5df2\u62e6\u622a======\u5176\u975e\u6cd5\u5730\u5740\u4e3a\uff1a”+guolv2(request.getRequestURL().toString()));
\nresponse.setStatus(403);
\n\/\/response.sendRedirect(request.getContextPath() + “\/login.jsp”);
\nreturn;
\n}
\n\/\/ \u4e3b\u673aip\u548c\u7aef\u53e3 \u6216 \u57df\u540d\u548c\u7aef\u53e3
\nString myhosts = request.getHeader(“host”);
\nString path=request.getSession().getServletContext().getRealPath(“\/WEB-INF\/classes\/csrfWhite.txt”) ;
\nArrayList<String> hosts = readFromTextFile(path);
\nif(!hosts.contains(myhosts)){
\nSystem.out.println(“======\u8bbf\u95eehost\u975e\u6cd5\uff0c\u5df2\u62e6\u622a======\u5176\u975e\u6cd5host\u4e3a:”+myhosts);
\nlog.info(“======\u8bbf\u95eehost\u975e\u6cd5\uff0c\u5df2\u62e6\u622a======\u5176\u975e\u6cd5host\u4e3a:”+myhosts);
\nresponse.setStatus(403);
\nreturn;
\n}<\/p>\n
String currentURL = request.getRequestURI();
\n\/\/ add by wangsk \u8fc7\u6ee4\u8bf7\u6c42\u7279\u6b8a\u5b57\u7b26\uff0c\u626b\u63cf\u8de8\u7ad9\u5f0f\u6f0f\u6d1e
\nMap parameters = request.getParameterMap();
\nif (parameters != null && parameters.size() > 0) {
\nfor (Iterator iter = parameters.keySet().iterator(); iter.hasNext();) {
\nString key = (String) iter.next();
\nString[] values = (String[]) parameters.get(key);
\nfor (int i = 0; i < values.length; i++) {
\nvalues[i] = guolv(values[i]);
\nSystem.out.println(values[i]);
\n}
\n}
\n}
\nfilterChain.doFilter(servletRequest, servletResponse);return;
\n}<\/p>\n
public void init(FilterConfig filterConfig) throws ServletException {<\/p>\n
}<\/p>\n
public static String guolv(String a) {
\na = a.replaceAll(“%22”, “”);
\na = a.replaceAll(“%27”, “”);
\na = a.replaceAll(“%3E”, “”);
\na = a.replaceAll(“%3e”, “”);
\na = a.replaceAll(“%3C”, “”);
\na = a.replaceAll(“%3c”, “”);
\na = a.replaceAll(“<“, “”);
\na = a.replaceAll(“>”, “”);
\na = a.replaceAll(“\\””, “”);
\na = a.replaceAll(“‘”, “”);
\na = a.replaceAll(“\\\\+”, “”);
\na = a.replaceAll(“\\\\(“, “”);
\na = a.replaceAll(“\\\\)”, “”);
\na = a.replaceAll(” and “, “”);
\na = a.replaceAll(” or “, “”);
\na = a.replaceAll(” 1=1 “, “”);
\nreturn a;
\n}<\/p>\n
private String getRequestString(HttpServletRequest req) {
\nString requestPath = req.getServletPath().toString();
\nString queryString = req.getQueryString();
\nif (queryString != null)
\nreturn requestPath + “?” + queryString;
\nelse
\nreturn requestPath;
\n}<\/p>\n
public String guolv2(String a) {
\nif (StringUtils.isNotEmpty(a)) {
\nif (a.contains(“%22”) || a.contains(“%3E”) || a.contains(“%3e”)
\n|| a.contains(“%3C”) || a.contains(“%3c”)
\n|| a.contains(“<“) || a.contains(“>”) || a.contains(“\\””)
\n|| a.contains(“‘”) || a.contains(“+”) ||
\na.contains(” and “) || a.contains(” or “)
\n|| a.contains(“1=1”) || a.contains(“(“) || a.contains(“)”)) {
\nreturn “bingo”;
\n}
\n}
\nreturn a;
\n}<\/p>\n
public static ArrayList<String> readFromTextFile(String pathname) throws IOException{
\nArrayList<String> strArray = new ArrayList<String>();
\nFile filename = new File(pathname);
\nInputStreamReader reader = new InputStreamReader(new FileInputStream(filename));
\nBufferedReader br = new BufferedReader(reader);
\nString line = “”;
\nline = br.readLine();
\nwhile(line != null) {
\nstrArray.add(line);
\nline = br.readLine();
\n}
\nreturn strArray;
\n}<\/p>\n
}<\/p>\n
2. URL\u8fc7\u6ee4\u5668CookieHttpOnlyFilter.java
\npackage cn.sh.steven.filter;<\/p>\n
import javax.servlet.*;
\nimport javax.servlet.http.Cookie;
\nimport javax.servlet.http.HttpServletRequest;
\nimport javax.servlet.http.HttpServletResponse;
\nimport javax.servlet.http.HttpSession;
\nimport java.io.IOException;<\/p>\n
\/**
\n* \u529f\u80fd\u63cf\u8ff0:
\n* <p>
\n* 1.Cookie \u8bbe\u7f6e httpOnly\u5c5e\u6027 Cookie
\n* 2.\u8bbe\u7f6e httpOnly\u5c5e\u6027\u9632\u6b62js\u8bfb\u53d6cookie
\n* <\/p>
\n*
\n* @author steven
\n*\/
\npublic class CookieHttpOnlyFilter implements Filter {<\/p>\n
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
\nthrows IOException, ServletException {
\nif (!(request instanceof HttpServletRequest)) {
\nchain.doFilter(request, response);
\nreturn;
\n}
\nHttpServletRequest httpReq = (HttpServletRequest) request;
\nHttpServletResponse httpResp = (HttpServletResponse) response;
\nCookie[] cookies = httpReq.getCookies();
\nif (cookies != null) {
\nCookie cookie = cookies[0];
\nif (cookie != null) {
\nHttpSession session = httpReq.getSession();
\nif (session != null) {
\nString sessionId = session.getId();
\n\/\/ http\u8bbe\u7f6e
\nhttpResp.addHeader(“Set-Cookie”, “JSESSIONID=” + sessionId + “; Path=\/fis; HttpOnly”);
\nhttpResp.addHeader(“x-frame-options”,”SAMEORIGIN”);
\n\/\/ https\u8bbe\u7f6e
\n\/\/ httpResp.addHeader(“Set-Cookie”, “JSESSIONID=” + sessionId
\n\/\/ + “; Path=\/admin;Secure; HttpOnly”);
\n}
\n}
\n}
\nchain.doFilter(httpReq, httpResp);<\/p>\n
}<\/p>\n
public void destroy() {
\n}<\/p>\n
public void init(FilterConfig filterConfig) throws ServletException {
\n}<\/p>\n
}<\/p>\n
2. URL\u8fc7\u6ee4\u5668web.xml
\n<filter>
\n<filter-name>XssSqlFilter<\/filter-name>
\n<filter-class>cn.sh.steven.filter.SessionFilter<\/filter-class>
\n<\/filter>
\n<filter-mapping>
\n<filter-name>XssSqlFilter<\/filter-name>
\n<url-pattern>\/*<\/url-pattern>
\n<\/filter-mapping>
\n<filter>
\n<filter-name> CookieHttpOnly<\/filter-name>
\n<filter-class>cn.sh.steven.filter.CookieHttpOnlyFilter<\/filter-class>
\n<\/filter>
\n<filter-mapping>
\n<filter-name> CookieHttpOnly<\/filter-name>
\n<url-pattern>\/*<\/url-pattern>
\n<\/filter-mapping><\/p>\n","protected":false},"excerpt":{"rendered":"
\u4e00\u3001 \u6f0f\u6d1e\u63cf\u8ff0 1. \u68c0\u6d4b\u5230\u76ee\u6807URL\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e \u5f88…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-515","post","type-post","status-publish","format-standard","hentry","category-java"],"_links":{"self":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/515","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/comments?post=515"}],"version-history":[{"count":1,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/515\/revisions"}],"predecessor-version":[{"id":1210,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/posts\/515\/revisions\/1210"}],"wp:attachment":[{"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/media?parent=515"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/categories?post=515"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.nonot.cn\/index.php\/wp-json\/wp\/v2\/tags?post=515"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}