SpringMVC 过滤参数的非法字符

import java.io.IOException;


import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import javax.servlet.http.HttpServletResponse;


import org.springframework.web.filter.OncePerRequestFilter;


/**
 * 
 * @desc:特殊字符过滤
 */
public class CharacterFilter extends OncePerRequestFilter {


@Override
protected void doFilterInternal(HttpServletRequest request,
HttpServletResponse response, FilterChain filterChain)
throws ServletException, IOException {
// TODO Auto-generated method stub
filterChain.doFilter(new HttpServletRequestWrapper(request) {


@Override
public String getParameter(String name) {
// 返回值之前 先进行过滤
return filterDangerString(super.getParameter(name));
}


@Override
public String[] getParameterValues(String name) {
// 返回值之前 先进行过滤
String[] values = super.getParameterValues(name);
if (values != null) {
for (int i = 0; i < values.length; i++) {
values[i] = filterDangerString(values[i]);
}
}
return values;
}
}, response);
}

public String filterDangerString(String value) {
        if (value == null) {
            return null;

        }

//根据自己实际需求过滤

        //value = value.replaceAll("%", "$");
        return value;
    }


}