关于springboot:HandlerMethodArgumentResolver方法解析器可以用于SQL注入拦截

HandlerMethodArgumentResolver
1、策略接口：用于在给定申请的上下文中将办法参数解析为参数值，它是HandlerMethod办法的解析器，将HttpServletRequest解析为HandlerMethod办法的参数。

public interface HandlerMethodArgumentResolver {/** * 性能形容: 判断是否反对 MethodParameter * 〈〉 * @Param: * @Return: * @Author: Steven * @Date: 2020/12/15 11:47 */boolean supportsParameter(MethodParameter parameter);/** * 性能形容: 用于数据绑定解析申请参数 * 〈〉 * @Param: * @Return: * @Author: Steven * @Date: 2020/12/15 11:47 */Object resolveArgument(MethodParameter parameter,       @Nullable ModelAndViewContainer mavContainer, NativeWebRequest webRequest, @Nullable WebDataBinderFactory binderFactory) throws Exception;}

2、

public class SqlFilterArgumentResolver implements       HandlerMethodArgumentResolver {/** * 性能形容: 判断controller申请参数中是否蕴含 CurrentUser * 〈〉 * @Param: * @Return: * @Author: Steven * @Date: 2020/12/15 11:47 */@Overridepublic boolean supportsParameter(MethodParameter parameter) {   return parameter.getParameterType().equals(CurrentUser.class);}/** * 性能形容: 获取获取申请体重的报文、解析 * 〈〉 * @Param: * @Return: * @Author: Steven * @Date: 2020/12/15 11:47 */@Overridepublic Object resolveArgument(MethodParameter parameter, ModelAndViewContainer mavContainer, NativeWebRequest webRequest, WebDataBinderFactory binderFactory) {    Optional.ofNullable(descs).ifPresent(s -> orderItemList.addAll(          Arrays.stream(s).filter(sqlInjectPredicate()).map(OrderItem::desc).collect(Collectors.toList()))); }  /** * 性能形容: 解决查问关键字 * 〈〉 * @Param: * @Return: * @Author: Steven * @Date: 2020/12/15 11:47 */ private Predicate<String> sqlInjectPredicate() {   return sql -> {      for (String keyword : KEYWORDS) {         if (StrUtil.containsIgnoreCase(sql, keyword)){            return false;         }      }      return true; }}}