blocks|key|1798820|text|我使用了一种方法described+by+Eric+Daugherty：我创建了一个特殊的servlet，它总是用403代码响应，并将其映射放在常规映射之前。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1798821|映射片段：|1798822|++<servlet>
++++<servlet-name>generalServlet</servlet-name>
++++<servlet-class>project.servlet.GeneralServlet</servlet-class>
++</servlet>
+<servlet>
++++<servlet-name>specialServlet</servlet-name>
++++<servlet-class>project.servlet.SpecialServlet</servlet-class>
+</servlet>
+<servlet-mapping>
++++<servlet-name>specialServlet</servlet-name>
++++<url-pattern>/resources/restricted/*</url-pattern>
+</servlet-mapping>
+<servlet-mapping>
++++<servlet-name>generalServlet</servlet-name>
++++<url-pattern>/resources/*</url-pattern>
+</servlet-mapping>|code-block|syntax|javascript|1798823|和servlet类：|1798824|public+class+SpecialServlet+extends+HttpServlet+{
++++public+SpecialServlet()+{
++++++++super();
++++}
++++protected+void+doGet(HttpServletRequest+request,+HttpServletResponse+response)+throws+ServletException,+IOException+{
++++++++response.sendError(HttpServletResponse.SC_FORBIDDEN);
++++}
++++protected+void+doPost(HttpServletRequest+request,+HttpServletResponse+response)+throws+ServletException,+IOException+{
++++++++response.sendError(HttpServletResponse.SC_FORBIDDEN);
++++}
}|1798825|entityMap|0|LINK|mutability|MUTABLE|url|http://blog.ericdaugherty.com/2010/02/excluding-content-from-url-pattern-in.html^0|8|R|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|13|8|@]|9|@]|C|$I|J]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]]]

I used an approach <a href="http://blog.ericdaugherty.com/2010/02/excluding-content-from-url-pattern-in.html" rel="noreferrer">described by Eric Daugherty</a>: I created a special servlet that always answers with 403 code and put its mapping before the general one.

Mapping fragment:

<pre class="lang-xml prettyprint-override"><code> &lt;servlet&gt;
 &lt;servlet-name&gt;generalServlet&lt;/servlet-name&gt;
 &lt;servlet-class&gt;project.servlet.GeneralServlet&lt;/servlet-class&gt;
 &lt;/servlet&gt;
 &lt;servlet&gt;
 &lt;servlet-name&gt;specialServlet&lt;/servlet-name&gt;
 &lt;servlet-class&gt;project.servlet.SpecialServlet&lt;/servlet-class&gt;
 &lt;/servlet&gt;
 &lt;servlet-mapping&gt;
 &lt;servlet-name&gt;specialServlet&lt;/servlet-name&gt;
 &lt;url-pattern&gt;/resources/restricted/*&lt;/url-pattern&gt;
 &lt;/servlet-mapping&gt;
 &lt;servlet-mapping&gt;
 &lt;servlet-name&gt;generalServlet&lt;/servlet-name&gt;
 &lt;url-pattern&gt;/resources/*&lt;/url-pattern&gt;
 &lt;/servlet-mapping&gt;
</code></pre>

And the servlet class:

<pre><code>public class SpecialServlet extends HttpServlet {
 public SpecialServlet() {
 super();
 }
 protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
 response.sendError(HttpServletResponse.SC_FORBIDDEN);
 }
 protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
 response.sendError(HttpServletResponse.SC_FORBIDDEN);
 }
}
</code></pre>

blocks|key|1798858|text|我还必须根据java代码中的URL模式(/{servicename}/api/stats/)进行过滤。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1798859|if+(path.startsWith("/{servicename}/api/statistics/"))+{
validatingAuthToken(((HttpServletRequest)+request).getHeader("auth_token"));
filterChain.doFilter(request,+response);++++++++++++
}|code-block|syntax|javascript|1798860|但奇怪的是，servlet除了(/*)之外不支持url模式，这对于servlet+API来说应该是非常常见的情况！|1798861|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I also Had to filter based on the URL pattern(/{servicename}/api/stats/)in java code .

<pre><code>if (path.startsWith("/{servicename}/api/statistics/")) {
validatingAuthToken(((HttpServletRequest) request).getHeader("auth_token"));
filterChain.doFilter(request, response); 
}
</code></pre>

But its bizarre, that servlet doesn't support url pattern other than (/*), This should be a very common case for servlet API's !

blocks|key|2012625|text|我也遇到了同样的问题，但我发现下面显示了一个答案。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2012626|web.xml|2012627|+
++++<init-param>
++++++++++++<param-name>freePages</param-name>
++++++++++++<param-value>
++++++++++++MainFrame.jsp;
++++++++++++</param-value>
++++</init-param>|code-block|syntax|javascript|2012628|filter.java|2012629|strFreePages+=+config.getInitParameter("freePages");+//get+the+exclue+pattern+from+config+file
isFreePage(strRequestPage)++//decide+the+exclude+path|2012630|这样，您就不必困扰具体的Filter类了。|2012631|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

I have encounterd the same issue, but I find a anwser showing below.

web.xml

<pre><code> &lt;!-- set this param value for the filter--&gt;
 &lt;init-param&gt;
 &lt;param-name&gt;freePages&lt;/param-name&gt;
 &lt;param-value&gt;
 MainFrame.jsp;
 &lt;/param-value&gt;
 &lt;/init-param&gt;
</code></pre>

filter.java

<pre><code>strFreePages = config.getInitParameter("freePages"); //get the exclue pattern from config file
isFreePage(strRequestPage) //decide the exclude path
</code></pre>

this way you don't have to harass the concrete Filter class.

blocks|key|1798922|text|我能够在Spring2中处理这个问题，如下所示|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1798923|+private+boolean+isInPath(ServletRequest+request)+{
+++String+PATH_TO_VALIDATE+=+"/path/";
+++String+path+=+((HttpServletRequest)+request).getRequestURI();
+++return+path+!=+null+&&+path.toLowerCase().contains(PATH_TO_VALIDATE);
}|code-block|syntax|javascript|1798924|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I was able to handle this in Spring 2 as following
<pre><code> private boolean isInPath(ServletRequest request) {
 String PATH_TO_VALIDATE = &quot;/path/&quot;;
 String path = ((HttpServletRequest) request).getRequestURI();
 return path != null &amp;&amp; path.toLowerCase().contains(PATH_TO_VALIDATE);
}
</code></pre>

I want some concrete filter to be applied for all urls except for one concrete (i.e. for <code>/*</code> except for <code>/specialpath</code>).

Is there a possibility to do that?

<hr>

sample code:

<pre class="lang-xml prettyprint-override"><code>&lt;filter&gt;
 &lt;filter-name&gt;SomeFilter&lt;/filter-name&gt;
 &lt;filter-class&gt;org.somproject.AFilter&lt;/filter-class&gt;
&lt;/filter&gt;
&lt;filter-mapping&gt;
 &lt;filter-name&gt;SomeFilter&lt;/filter-name&gt;
 &lt;url-pattern&gt;/*&lt;/url-pattern&gt; &lt;!-- the question is: how to modify this line? --&gt;
 &lt;dispatcher&gt;REQUEST&lt;/dispatcher&gt;
 &lt;dispatcher&gt;FORWARD&lt;/dispatcher&gt;
&lt;/filter-mapping&gt;
</code></pre>

Can I exclude some concrete urls from <url-pattern> inside <filter-mapping>?

我希望将一些具体的过滤器应用于除一个具体的urls之外的所有urls(即，除了/specialpath之外的/* )。有这样做的可能性吗？示例代码：<filter> <filter-name>SomeFilter</filter-name> <filter-class>org.somproject.AFil...

问我可以从<filter-mapping>内部的<url-pattern>排除一些具体的url吗？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问我可以从<filter-mapping>内部的<url-pattern>排除一些具体的url吗？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问我可以从<filter-mapping>内部的<url-pattern>排除一些具体的url吗？
EN