4_DWR异常处理与安全.ppt

全局异常处理 User HelloService StaticDemo AjaxFacade dwr.xml 设置全局异常控制器 设置局部异常控制器 DWR安全配置 tomcat_user.xml 配置web.xml 配置web.xml 全局异常处理 * DWR异常处理与安全 局部异常处理 DWR安全配置 Tomcat安全配置 课程安排 public class User { private String userName; public String getUserName() { return userName; } public void setUserName(String userName) { this.userName = userName; } } public class HelloService { public String hello(User u) throws Exception { if(true) { System.out.println(Exception test!!!); throw new RuntimeException(Dwr exception!!!); } return Hello ACCP +u.getUserName()+!!!; } } public class StaticDemo { public static String m() { return static demo; } } public class AjaxFacade { public String hello(User user) throws Exception { HelloService hs=new HelloService(); return hs.hello(user); } public String m() { //StaticDemo sd=new StaticDemo(); return StaticDemo.m(); } } dwr allow create creator=new javascript=ajaxFacade param name=class value=com.lxt008.AjaxFacade / include method=hello/include include method=m/include /create !-- 异常转换器，没设置的话js中只能获得Error -- convert match=java.lang.Exception converter=exception /convert convert match=java.lang.StackTraceElement converter=bean /convert convert match=com.lxt008.User converter=bean/convert /allow /dwr ** java.lang.StackTraceElement最好不要设置，因为安全起见最好不要把堆栈信息暴露出给客户！但是DWR会报错！ input type=button value=Demo onclick=eventHandle();/input script language=javascript function handleException(errorString,exception) { alert(全局异常控制,发现异常:+errorString); alert(全局异常控制,发现异常:+exception.message); } //设置全局异常处理器 dwr.engine.setErrorHandler(handleException); //DWREngine.setErrorHandler(handleException); function eventHandle() { var user={userName:lxt001}; //设置局部异常处理器 ajaxFacade.hello(user,{ callback: callBackFun, errorHandler: function(errorString, exception) { alert(局部异常控制,发现异常:+errorString); alert(局部异常控制,发现异常:+exception.message); alert(局部异常控制,发现异常:+exception.javaClassName); } }); //ajaxFacade.m(callBackFun); } function callBackF