cookie 設(shè)置 httpOnly屬性防止js讀取cookie.

建立filter攔截器類

CookieHttpOnlyFilter

import?java.io.IOException; import?javax.servlet.Filter; import?javax.servlet.FilterChain; import?javax.servlet.FilterConfig; import?javax.servlet.ServletException; import?javax.servlet.ServletRequest; import?javax.servlet.ServletResponse; import?javax.servlet.http.Cookie; import?javax.servlet.http.HttpServletRequest; import?javax.servlet.http.HttpServletResponse; import?javax.servlet.http.HttpSession; /***? *?<P>CookieにHTTPOnly屬性を設(shè)定インターセプタークラス.</P> * *?@author?hnnc *?@author?$Author$ *?@version?$Id$*/ public?class?CookieHttpOnlyFilter?implements?Filter?{/**?{@inheritDoc}?**/public?void?doFilter(ServletRequest?request,?ServletResponse?response,FilterChain?chain)?throws?IOException,?ServletException?{if?(!(request?instanceof?HttpServletRequest))?{chain.doFilter(request,?response);return;}HttpServletRequest?httpReq?=?(HttpServletRequest)?request;HttpServletResponse?httpResp?=?(HttpServletResponse)?response;Cookie[]?cookies?=?httpReq.getCookies();if?(cookies?!=?null)?{Cookie?cookie?=?cookies[0];if?(cookie?!=?null)?{HttpSession?session?=?httpReq.getSession();if?(session?!=?null)?{String?sessionId?=?session.getId();//?httpの設(shè)置httpResp.addHeader("Set-Cookie",?"JSESSIONID="?+?sessionId+?";?Path=/admin;?HttpOnly");//?httpsの設(shè)置 //????????????????????httpResp.addHeader("Set-Cookie",?"JSESSIONID="?+?sessionId //????????????????????????????+?";?Path=/admin;Secure;?HttpOnly");}}}chain.doFilter(httpReq,?httpResp);}/**?{@inheritDoc}?**/public?void?destroy()?{}/**?{@inheritDoc}?**/public?void?init(FilterConfig?filterConfig)?throws?ServletException?{} }

web.xml中配置攔截器

<filter><filter-name>CookieHttpOnly</filter-name><filter-class>jp.co.univ.www.admin.filter.CookieHttpOnlyFilter</filter-class></filter> <filter-mapping><filter-name>CookieHttpOnly</filter-name><url-pattern>/*</url-pattern></filter-mapping>

參考：

http://conkeyn.iteye.com/blog/2025484

http://blog.csdn.net/a19881029/article/details/27536917

轉(zhuǎn)載于:https://blog.51cto.com/10926470/1921232

總結(jié)

以上是生活随笔為你收集整理的cookie 设置 httpOnly属性的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。