特殊字符保存拦截-html标签等

<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-webmvc</artifactId>
<version>${spring.version}</version>
</dependency></span>

public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
Map params = request.getParameterMap();
Iterator i$ = params.keySet().iterator();

while(i$.hasNext()) {
Object key = i$.next();
Object value = params.get(key);
if(value instanceof String[]) {
String[] str = (String[])((String[])value);

for(int result = 0; result < str.length; ++result) {
String result1 = HtmlUtils.htmlEscape(str[result]);
if(!result1.equals(str[result])) {
logger.getBuilder().error("包含非法字符：[{}]" + str[result]);
throw new BusinessException("您输入了非法字符，请检查修改后再操作，谢谢您的配合！");
}
}
}

if(value instanceof String) {
String var11 = (String)value;
String var12 = HtmlUtils.htmlEscape(var11);
if(!var12.equals(var11)) {
throw new BusinessException("您输入了非法字符，请检查修改后再操作，谢谢您的配合！");
}
}
}

return true;
}

public class BusinessException extends RuntimeException {
private static final long serialVersionUID = xxxxxxxxxxL;

public BusinessException(String msg) {
super(msg);
}

public BusinessException(String msg, Throwable ex) {
super(msg, ex);
}
}

layer.confirm("确定要提交吗？", {title: "提示信息"}, function () {
$.ajax({
type: 'post',
url: '/xx/save',
data: $("#xxForm").serialize(),
error: function (data) {
showError(data);
},
success: function (data) {
if (data.code == 0) {
layer.msg(data.desc,{time:1000});
} else {
layer.alert(data.desc, {icon: 2, skin: 'layer-ext-moon', title: '提示信息'});
}
}
});
});

function showError(obj) {
if(obj.status != 500) {
layer.alert("超时或系统异常", {icon: 2, skin: 'layer-ext-moon', title: '提示信息'});
} else {
layer.alert(obj.responseText, {icon: 2, skin: 'layer-ext-moon', title: '提示信息'});
}
}