How to fix Findbugs HTTP parameter directly written to HTTP header output

问题:

I have a class RequestFilter and @Override methods doFilterInternal. And when i add Header for response, findbugs show error HTTP parameter directly written to HTTP header output. So how can i fix this problem? Thanks all.

String rqHd = request.getHeader("Access-Control-Request-Headers");     response.addHeader("Access-Control-Allow-Headers", rqHd); // findbugs error here 

回答1:

I think this is HRS_REQUEST_PARAMETER_TO_HTTP_HEADER error, and you can fix it like that:

String rqHd = request.getHeader("Access-Control-Request-Headers");  if(rqHd != null){     String rqHeader = URLEncoder.encode(rqHd,StandardCharsets.UTF_8.displayName());        response.addHeader("Access-Control-Allow-Headers", rqHeader); } 

文章来源: How to fix Findbugs HTTP parameter directly written to HTTP header output