@@ -0,0 +1,1054 @@
+package cn.wizzer.common.mvc.processor;%0D%0A%0D%0Aimport java.lang.reflect.Method;%0D%0Aimport java.util.Enumeration;%0D%0Aimport java.util.Map;%0D%0A%0D%0Aimport javax.servlet.http.HttpServletRequest;%0D%0A%0D%0Aimport org.apache.commons.lang3.StringEscapeUtils;%0D%0Aimport org.nutz.mvc.ActionContext;%0D%0Aimport org.nutz.mvc.impl.processor.AbstractProcessor;%0D%0A%0D%0Apublic class XSSProcessor extends AbstractProcessor %7B%0D%0A%0D%0A%09@Override%0D%0A%09public void process(ActionContext ac) throws Throwable %7B%0D%0A%09%09HttpServletRequest req = ac.getRequest();%0D%0A%09%09Map%3C?,?%3E requestParams=req.getParameterMap(); %0D%0A%09%09Method method=requestParams.getClass().getMethod(%22setLocked%22,new Class%5B%5D%7Bboolean.class%7D); %0D%0A%09%09method.invoke(requestParams,new Object%5B%5D%7Bnew Boolean(false)%7D); %0D%0A%09%09Enumeration%3C?%3E reqs = req.getParameterNames();%0D%0A%09%09while (reqs.hasMoreElements()) %7B%0D%0A%09%09%09String strKey = (String) reqs.nextElement();%0D%0A%09%09%09String value = req.getParameter(strKey);%0D%0A%09%09%09req.setAttribute(strKey, StringEscapeUtils.escapeHtml4(value));%0D%0A%09%09%7D%0D%0A%09%09method.invoke(requestParams,new Object%5B%5D%7Bnew Boolean(true)%7D); %0D%0A%09%09doNext(ac);%0D%0A%09%7D%0D%0A%0D%0A%7D%0D%0A

add code