Request获取请求之前的URL地址

request.getRequestURL()、request.getRequestURI()均不行&＃xff0c;获取的是请求的地址。

使用request.getHeader("Referer")就可以正确的获取到之前请求的页面URL地址。

Http协议中定义了头部的属性&＃xff0c;其中有一个参数"Referer"记录请求之前的页面地址。

In the most common situation this means that when a user clicks a link in a web browser, the browser sends a request to the server holding the destination webpage. The request includes the referrer field, which says the last page the user was on (the one where he/she clicked the link).

Referrer logging is used to allow websites and web servers to identify where people are visiting them from, for promotional or security purposes. Referrer is a popular tool to combat cross-site request forgery, but such security mechanisms are weakened by the ease of disabling or forging a referrer. The referrer is widely used for statistical purposes.

referrer有效的阻止了跨站攻击(XSS)。

If a website is accessed from a HTTP Secure (HTTPS) connection and a link points to anywhere except another secure location, then the referrer field is not sent. The upcoming standard HTML5 will support the attribute/value rel &＃61; "noreferrer" in order to instruct the user agent not to send a referrer.