过滤URL中的JSESSIONID

1.写个过滤器

package com.jetsum.util;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpServletResponseWrapper;
import javax.servlet.http.HttpSession;
import java.io.IOException;

/**
 * 过滤URL中的JSESSIONID
 * @author ShaoJiang
 *
 */
public class DisableUrlSessionFilter implements Filter {

   
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        // skip non-http requests
        if (!(request instanceof HttpServletRequest)) {
             chain.doFilter(request, response);
            return;
         }

         HttpServletRequest httpRequest = (HttpServletRequest) request;
         HttpServletResponse httpResponse = (HttpServletResponse) response;
         
        // clear session if session id in URL
        if (httpRequest.isRequestedSessionIdFromURL()) {
             HttpSession session = httpRequest.getSession();
            if (session != null) session.invalidate();
         }

        // wrap response to remove URL encoding
         HttpServletResponseWrapper wrappedResponse = new HttpServletResponseWrapper(httpResponse) {
             @Override
            public String encodeRedirectUrl(String url) {
                return url;
             }

         
            public String encodeRedirectURL(String url) {
                return url;
             }

           
            public String encodeUrl(String url) {
                return url;
             }

           
            public String encodeURL(String url) {
                return url;
             }
         };

        // process next request in chain
         chain.doFilter(request, wrappedResponse);
     }

    /**
      * Unused.
     */
    public void init(FilterConfig config) throws ServletException {
     }

    /**
      * Unused.
     */
    public void destroy() {
     }
}

2.在web.xml中配置过滤器

	<filter>
	   <filter-name>JSESSIONID</filter-name>
	   <filter-class>
	    com.jetsum.util.DisableUrlSessionFilter
	   </filter-class>
	</filter>
	
	<filter-mapping>
	   <filter-name>JSESSIONID</filter-name>
	   <url-pattern>/*</url-pattern>
	</filter-mapping>