Question

我编造了一些小篇档案,作为回应,一些json 扼杀。但是,我看到,内容提式包裹会自动装到txt。

我的jsp法典像我一样。

<%@ page import="java.util.Random" %>
<%@ page language="java" %>
<%@ page session="false" %>

<%
  String retVal = "// some json string";

     int millis = new Random().nextInt(1000);
     //    System.out.println("sleeping for " + millis + " millis");
     Thread.sleep(millis);
%>
<%=retVal%>

我如何做这样的事情

setHeader("Content-Type", "application/json");

这一例子?

Answer 1

http://java.sun.com/products/jsp/tags/11/syntaxref11.fm7.html。页: 1

For example:

<%@ page language="java" contentType="application/json; charset=UTF-8"
    pageEncoding="UTF-8"%>

contentType="mimeType [ ;charset=characterSet ]" | "text/html;charset=ISO-8859-1"

The MIME type and character encoding the JSP file uses for the response it sends to the client. You can use any MIME type or character set that are valid for the JSP container. The default MIME type is text/html, and the default character set is ISO-8859-1.

Answer 2

对于这部法典,它也应该同样发挥作用。

<%
    //response.setContentType("Content-Type", "application/json"); // this will fail compilation
    response.setContentType("application/json"); //fixed
%>

Answer 3

@Petr Mensik &kensen john

由于我不得不根据某些URL参数确定不同的内容类型,因此我无法使用该页指令。我将在此重申我的准则,因为它与日本人有着相当共同之处:

    <%
        String callback = request.getParameter("callback");
        response.setCharacterEncoding("UTF-8");
        if (callback != null) {
            // Equivalent to: <@page contentType="text/javascript" pageEncoding="UTF-8">
            response.setContentType("text/javascript");
        } else {
            // Equivalent to: <@page contentType="application/json" pageEncoding="UTF-8">
            response.setContentType("application/json");
        }
    
        [...]
    
        String output = "";
    
        if (callback != null) {
            // IMPORTANT! Sanitise the "callback",
            // do not use user input directly in the response!
            // This is vulnerable to XSS attacks.
            output += callback + "(";
        }
    
        output += jsonObj.toString();
    
        if (callback != null) {
            output += ");";
        }
    %>
    <%=output %>

提供回响时,返回:

    callback({...JSON stuff...});

内容类型“文字/文字”

当NOT供应时,返回:

    {...JSON stuff...}

内容类型“应用/json”

[EDIT] I m 审查我的旧职位。如果你利用这一解决办法,请你提供意见! 将用户投入直接用于应对措施,是危险的。

友情链接