DevGex Search

This article explores methods for dynamically adding HTTP headers in Java Servlet filters, focusing on extending HttpServletRequestWrapper to override header getter methods for parameter-to-header conversion. It analyzes code implementation, advantages, disadvantages, security considerations, and provides complete examples with supplementary references.

This article explores how to correctly configure multiple URL patterns in Servlet Filters for authentication checks in JSF applications. Through a case study of a common problem, it explains URL pattern matching mechanisms, the relationship between context roots and path prefixes, and provides two solutions: adjusting URL patterns to include full path prefixes or refactoring project structure to simplify URLs. The article also discusses the distinction between HTML tags and character escaping, ensuring code examples display correctly in HTML source.

This article explains how to modify request parameters using Servlet filters and HttpServletRequestWrapper without altering the source code, to defend against XSS attacks. It covers core concepts, implementation, and best practices.

This article delves into the technical details of retrieving HTTP headers in Servlet Filters. It explains the distinction between ServletRequest and HttpServletRequest, and provides a detailed guide on obtaining all request headers through type casting and the getHeaderNames() and getHeader() methods. The article also includes examples of stream processing in Java 8+, demonstrating how to collect header information into Maps and discussing the handling of multi-valued headers. By comparing the pros and cons of different approaches, it helps developers choose the most suitable solution for their projects.

This article provides an in-depth exploration of the limitations in Servlet filter URL pattern configuration and analyzes how to implement conditional filter execution through programming approaches when the standard Servlet API does not support direct exclusion of specific paths. The article presents three practical solutions: adding path checking logic in the doFilter method, using initialization parameters for dynamic configuration of excluded paths, and integrating third-party filters through filter chains and request dispatching. Each solution is accompanied by complete code examples and configuration instructions to help developers flexibly address various application scenario requirements.

This article details how to use Servlet Filters in Java EE to rewrite incoming URLs from path-based to query parameter format. It covers step-by-step implementation, code examples, configuration in web.xml, and best practices to avoid issues like infinite loops. Insights from reference materials on using filters for state preservation are included, applicable to various web development scenarios.

This article provides an in-depth exploration of correctly obtaining HTTP request URLs within Java Servlet filters. By analyzing common error patterns, it详细 explains the usage of getRequestURL() and getQueryString() methods from the HttpServletRequest interface, offering complete code examples and best practice recommendations. The discussion extends to URL reconstruction, type safety checks, exception handling, and other critical technical aspects to help developers avoid common pitfalls and write robust filter code.

This paper provides an in-depth analysis of implementing session expiration detection and redirection to login pages in Java web applications through Servlet Filters. It begins by examining the fundamental concepts of session expiration and its configuration in web.xml. The paper then details a straightforward detection approach using the HttpSession.isNew() method, while highlighting its limitations. As a robust alternative, it discusses checking user authentication objects stored in sessions to determine login status, thereby avoiding misjudgments caused by newly created sessions. By comparing the strengths and weaknesses of both methods, this paper offers comprehensive technical guidance for developers to build reliable session management systems.

This article provides an in-depth exploration of methods for handling POST request payload data in Java Servlet, focusing on the usage scenarios and limitations of the core APIs getReader() and getInputStream(). Through practical code examples, it demonstrates how to correctly read request body content and analyzes considerations when processing request payloads in Filters, including one-time read limitations and solutions. The article also compares the advantages and disadvantages of different implementation approaches, offering comprehensive technical reference for developers.

This article addresses the issue in Java Servlet filters where POST request parameters are consumed after the first read, preventing subsequent access. By analyzing the underlying mechanisms of HttpServletRequest, it proposes a solution based on HttpServletRequestWrapper to cache the request body for multiple reads. Additionally, it introduces Spring Framework's ContentCachingRequestWrapper as an alternative, discussing implementation details and considerations.

This article provides a comprehensive examination of implementing dynamic parameter setting in Java web applications through HttpServletRequestWrapper and filter patterns. It begins by analyzing the limitations of the standard API, then demonstrates with detailed code examples how to create parameter-enhanced request wrappers and integrate them into filter chains. The discussion also covers attribute setting as an alternative approach, helping developers understand core Servlet request processing mechanisms.

This article provides an in-depth exploration of techniques to avoid scriptlets in JSP 2, analyzing six major disadvantages of scriptlets and systematically introducing modern alternatives including JSTL tag libraries, EL expressions, Servlet filters, and MVC patterns. Through concrete code examples and architectural comparisons, it demonstrates how to achieve better code reusability, testability, and maintainability while adhering to Oracle's official best practice recommendations.

This article provides an in-depth analysis of the Spring Security filter chain working mechanism, detailing the execution order and functionality of key filters including SecurityContextPersistenceFilter and UsernamePasswordAuthenticationFilter. Through practical configuration examples, it demonstrates the auto-configuration process of form-login and focuses on JWT token authentication integration solutions, covering custom filter development, multi-authentication mechanism coexistence strategies, and SecurityContext persistence customization methods. The article includes complete code implementations and configuration examples, offering comprehensive guidance for security framework customization.

This article provides a comprehensive exploration of Java Servlet core mechanisms, covering Servlet container startup processes, Servlet instantiation strategies, HttpSession session management principles, and thread safety in multithreaded environments. Through detailed analysis of the lifecycle and scope of ServletContext, HttpServletRequest, HttpServletResponse, and HttpSession, combined with practical code examples demonstrating proper usage of instance and session variables, it assists developers in building high-performance, thread-safe web applications.

This article explores common issues in configuring Cross-Origin Resource Sharing (CORS) in Spring Boot Security applications, particularly when CORS headers are not correctly set for URLs managed by Spring Security, such as login/logout endpoints. Based on best practices from the Q&A data, it details how to resolve this problem by implementing a custom CorsFilter and integrating it into Spring Security configuration. The content covers the fundamentals of CORS, the working mechanism of Spring Security filter chains, steps for custom filter implementation, and comparative analysis with other configuration methods. The article aims to provide developers with a reliable and flexible solution to ensure proper handling of cross-origin requests within security frameworks.

This article provides an in-depth exploration of enabling Cross-Origin Resource Sharing (CORS) in Apache Tomcat servers, focusing on configuration through the CORS filter in the web.xml file. Based on Tomcat official documentation, it explains the basic concepts of CORS, configuration steps, common parameter settings, and includes code examples and debugging tips. Additional insights from other answers, such as Tomcat version requirements and path-finding methods, are referenced to ensure comprehensiveness and practicality. Ideal for Java developers handling cross-domain web services.

This technical article provides an in-depth analysis of cookie removal mechanisms in Java Servlets, focusing on the proper usage of setMaxAge method. Through comparative analysis of setMaxAge(-1) and setMaxAge(0), it explains the distinction between session cookies and persistent cookies. The article includes complete code examples and best practice recommendations to help developers correctly implement cookie deletion functionality.

This article delves into the technical details of obtaining raw POST data from the HttpServletRequest object in Java Servlet environments. By analyzing the workings of HttpServletRequest.getInputStream() and getReader() methods, it explains the limitation that the request body can only be read once, and provides multiple practical solutions, including using filter wrappers, caching request body data, and properly handling character encoding. The discussion also covers interactions with the getParameter() method, with code examples demonstrating how to reliably acquire and reuse POST data in various scenarios, suitable for modern web application development dealing with JSON, XML, or custom-formatted request bodies.

This technical paper provides an in-depth analysis of Cross-Origin Resource Sharing (CORS) implementation in Spring Boot backend and AngularJS frontend architectures. Through detailed examination of common 401 unauthorized errors, the article explores proper CORS filter configuration, Spring Security integration, and frontend-backend coordination mechanisms. Based on best practices, it offers complete code examples and configuration guidelines to help developers resolve cross-domain authentication issues efficiently.

This article provides an in-depth exploration of implementing API key and secret authentication mechanisms in Spring Boot applications, specifically for scenarios requiring anonymous data access without user authentication. By analyzing the pre-authentication filter architecture of Spring Security, it details the creation of custom authentication filters, security policy configuration, and stateless session management. With practical code examples as the core, the article systematically explains the complete process from extracting API keys from request headers, implementing validation logic, to integrating security configurations, while comparing the advantages and disadvantages of different implementation approaches, offering developers extensible security solutions.