使用“&”特殊字符获取数据时面临问题

Question

我们的应用程序中有一个屏幕/页面，用于显示不同产品的不同列。这些列中的所有记录都是从数据库中获取的。

此外，我们在屏幕底部有两个 export 按钮，用于在 PDF 和 XLS 中显示所有这些记录格式。

除了在一种情况下，这些功能都可以正常工作。我们在屏幕中有一列name，其值是从数据库中获取的。当 name 列下的任何记录包含 & 时，导出功能将停止工作。

例如：-

对于名称“BOWOG BEHEER B.V.”，导出适用于 pdf 和 xls。

但是对于“BOWOG & BEHEER B.V.”这个名称，它停止了工作。在点击export按钮时，pdf和xls显示为空白页。

有人可以帮忙吗？

下面是一段代码：-（不是完整代码）

public class CVRExportServlet extends HttpServlet {

    private final SimpleDateFormat sdf = new SimpleDateFormat("ddMMyyyy");

    /** context. */
    private ResourceContext context = null;

    private Map createParametersFromRequest(final HttpServletRequest request) {
        // copy all request parameters
        final Map parameters = new HashMap();
        final Enumeration names = request.getParameterNames();

        while (names.hasMoreElements()) {
            final String name = (String) names.nextElement();
            final String[] values = request.getParameterValues(name);

            if (values.length > 1) {
                parameters.put(name, values);
            } else {
                parameters.put(name, values[0]);
            }
        }
        // parse request uri to get type and format
        final String requestURI = request.getRequestURI();
        String type = StringUtils.left(requestURI, requestURI.lastIndexOf('.'));
        type = StringUtils.substring(type, requestURI.lastIndexOf('/') + 1);

        final String format = StringUtils.substring(requestURI, requestURI.lastIndexOf('.') + 1);

        parameters.put(Constants.EXPORT_TYPE_PARAMETER, type);
        parameters.put(Constants.EXPORT_FORMAT_PARAMETER, format);

        // determine themeUrl
        final String requestUrl = request.getRequestURL().toString();
        final int index = requestUrl.indexOf(request.getContextPath());
        String server = "";
        if (index > -1) {
            server = requestUrl.substring(0, index);
        }

    private void fillParameters(final HttpServletRequest request, final HttpServletResponse response, final Map parameters)
      throws ApplicationException {

        parameters.put("props", ResourceBundle.getBundle("messages"));

        // Create search request using the search form
        final SearchForm form = (SearchForm) request.getSession().getAttribute(
        (String) request.getSession().getAttribute(CvrConstants.SESS_ATTR_CVR_SEARCH_FORM_NAME));
        final SearchRequest searchRequest = form.getSearchRequest();
        searchRequest.setPageNumber(1);
        searchRequest.setRowsPerPage(10000);
        parameters.put("searchRequest", searchRequest);     
    }

    public void service(final HttpServletRequest request, final HttpServletResponse response)
            throws ServletException, IOException {

        final long startTime = System.currentTimeMillis();

        // create parameters from request
        final Map parameters = this.createParametersFromRequest(request);
        parameters.put(ResourceContext.class.getName(), this.context);

        try {
            this.fillParameters(request, response, parameters);
            final SearchRequest searchRequest = (SearchRequest) parameters.get("searchRequest");
            if (searchRequest == null || searchRequest.getCounterPartyList() == null
                    || searchRequest.getCounterPartyList().isEmpty()) {
            throw new ExportException("Exception occurred while handling export: empty counterparty list");
            } else {
                if (searchRequest.getCounterPartyList().size() == 1) {
                    this.handleSingleReportExport(response, parameters);
                } else {
                    this.handleMutlipleReportExport(response, parameters);
                }
            }
        } catch (final Exception e) {
            this.handleException(e, request, response);
          }
       }

    private void handleSingleReportExport(final HttpServletResponse response, final Map parameters) throws Exception {


        final XmlExportService exportService = this.getXmlExportService();
        final ApplicationContext context = this.getApplicationContext();
        final XmlTransformationService xmlTransformationService = (XmlTransformationService) context.getBean("transformationService");

        // perform export
        exportService.export(parameters);

        // perform transformation
        final ExportResult exportResult = xmlTransformationService.transform(parameters);

        // write result to stream
        response.setContentType(exportResult.getContentType());

        response.setContentLength(exportResult.getContentLength());
        if (parameters.get("format").equals("csv")) {

            response.setContentType("text/csv");
            response.setHeader("Content-disposition", "attachment; filename=export.csv");
        } else if (parameters.get("format").equals("pdf")) {

            response.setContentType("application/pdf");
            response.setHeader("Content-disposition", "inline; filename=export.pdf");
        }

        final ServletOutputStream out = response.getOutputStream();
        out.write(exportResult.getBytes());
        out.flush();
        out.close();

    }

    private void handleMutlipleReportExport(final HttpServletResponse response, final Map parameters) throws Exception {
        final SearchRequest searchRequest = (SearchRequest) parameters.get("searchRequest");

        response.setContentType("application/force-download");
        response.setHeader("Content-Encoding" , "x-compress");
        response.setHeader("Content-Disposition", "attachment; filename=export_" + parameters.get("format") + ".zip");

        final XmlExportService exportService = this.getXmlExportService();
        final ApplicationContext context = this.getApplicationContext();
        final XmlTransformationService xmlTransformationService = (XmlTransformationService) context.getBean("transformationService");

        // start the zip process
        final ZipOutputStream zos = new ZipOutputStream(response.getOutputStream());

        // create a file for each counterparty and add it to the zip file
        for (final String counterPartyId : searchRequest.getCounterPartyList()) {
            // make sure to reset the counterparty to the current one in the loop
            searchRequest.setCounterPartyList(Arrays.asList(new String[] {counterPartyId}));

            // perform export
            exportService.export(parameters);

            // perform transformation
            final ExportResult exportResult = xmlTransformationService.transform(parameters);

            // add the file to the zip
            final String fileName = counterPartyId + "_" + sdf.format(searchRequest.getRevaluationDate()) + "." + parameters.get("format");

            zos.putNextEntry(new ZipEntry(fileName));
            zos.write(exportResult.getBytes());
            zos.closeEntry();
        }
        // finish the zip process
        zos.flush();
        zos.close();    
    }

---

我现在有了一些想法。实际上问题在于 vm（速度模板）。 “名称”列是从 vm 文件中获取的，代码如下所示：-

$!{result.counterpartyName}

这是针对多条记录的每个循环。谁能建议我如何忽略 vm 文件本身中的特殊字符。这样即使“name”列有“&”或“-”等特殊字符，我们也能正确导出。

Answer 1

根据您的代码，您似乎正在使用 XML 转换服务。

我会说这可能是您的参数中的数据包含悬空的& 符号。要成为可用于转换的有效 XML，& 应该是 &。但是，根据给出的代码，无法说出 XML 数据的来源。你说它来自数据库，所以我的猜测是应该通过修改数据库中的数据来处理问题。

编辑：

似乎我部分正确，但数据库不包含 XML - 如果我正确理解，数据来自数据库作为原始表格数据，但使用速度模板格式化为 XML。如果是这样，那么应该在velocity模板like this中使用XML转义。