<filter>

        <filter-name>xssAndSqlFilter</filter-name>

        <filter-class>com.tzdr.btc.user.filter.XssAndSqlFilter</filter-class>

        <!--过滤掉 静态资源文件 指定字符串  多个值用英文逗号隔开-->

        <init-param>

            <param-name>excludedPages</param-name>

            <param-value>/tesra/</param-value>

        </init-param>

    </filter>

    <filter-mapping>

        <filter-name>xssAndSqlFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

@Override

    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {

        boolean isExcludedPage = Boolean.TRUE;

        HttpServletResponse httpResponse = (HttpServletResponse) response;

        HttpServletRequest request1 = (HttpServletRequest) request;

        //*表示允许所有域名跨域

        httpResponse.setHeader("Access-Control-Allow-Origin", request1.getHeader("Origin"));

        httpResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");

        httpResponse.setHeader("Access-Control-Max-Age", "0");

        httpResponse.setHeader("Access-Control-Allow-Headers", "Origin, No-Cache, X-Requested-With, If-Modified-Since, Pragma, Last-Modified, Cache-Control, Expires, Content-Type, X-E4M-With,userId,token,Access-Control-Allow-Headers");

        httpResponse.setHeader("Access-Control-Allow-Credentials", "true");//这个是设置运行携带cookie

        httpResponse.setHeader("XDomainRequestAllowed","1");

        //判断是否在过滤url之外

        for (String page : excludedPageArray) {

            if(((HttpServletRequest) request).getServletPath().contains(page)){

                isExcludedPage = Boolean.FALSE;

                break;

            }

        }

        //在过滤url之外

        if (isExcludedPage) {

            XssAndSqlHttpServletRequestWrapper xssRequest = new XssAndSqlHttpServletRequestWrapper((HttpServletRequest) request);

            chain.doFilter(xssRequest, response);

        }

        else{

            chain.doFilter(request, response);

        }

    }