Web security protection method

Abstract

The invention provides a Web security protection method, which comprises the following steps that a security component is introduced, the security component is a Jar packet, a LimitWordUtil desensitization tool class in the Jar packet comprises a plurality of filtering methods, a Security Request Wrapper class comprises a plurality of methods for obtaining request contents of a request object, each method for acquiring the request content of the request object calls a plurality of filtering methods before returning a result; when an external request exists, intercepting a specified request through a Security Filter class, it is judged whether the specified request is a white list request, and if the specified request is not the white list request, a request object is repackaged by using a Security Request Wrapper class; and the packaged request object is transmitted back to the filter chain of the SecurityFilter type.

Description

technical field [0001] The invention relates to the technical field of Web security, in particular to a Web security protection method. Background technique [0002] With the rapid development of Internet technology in recent years, as well as domestic and international environmental changes and network security requirements, all enterprises and institutions are paying more and more attention to the construction of network security. In addition to the security construction at the hardware and network levels, many security requirements have been put forward for Web application services, so that our developers have to consider the processing of various Web security factors in project construction. The common ones are Xss (Cross Site Scripting, cross-site scripting attack) cross-site scripting, SQL (Structured Query Language, Structured Query Language) injection, sensitive information disclosure, etc. [0003] In the current development framework, there are no particularly goo...

AI Technical Summary

Problems solved by technology

Caused project developers to scatter

2. Due to the different levels of technical ability and understanding of security issues of each project team, in the actual project security hardening development, there is a problem that A vulnerability is solved and B vulnerability is exposed

During the repeated process of security scanning and vulnerability repairing by the project team, it gave Party A a very bad perception and exposed many security risks.

3. Since each project maintains its own security issues, it fails to concentrate efforts to solve various security issues, resulting in a waste of manpower for repeated security reinforcement in multiple projects or functions

Images