urlrewrite 配置问题

大家好,现在使用 urlrewrite, web框架 ssh + freemarker
,目前对于 urlrewrite 的配置文件不是很了解
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE urlrewrite PUBLIC "-//tuckey.org//DTD UrlRewrite 2.6//EN"
"http://tuckey.org/res/dtds/urlrewrite2.6.dtd">



<!--


The rule means that requests to /test/status/ will be redirected to /rewrite-status
the url will be rewritten.

/test/status/
%{context-path}/rewrite-status

<outbound-rule>
    <note>
        The outbound-rule specifies that when response.encodeURL is called (if you are using JSTL c:url)
        the url /rewrite-status will be rewritten to /test/status/.

        The above rule and this outbound-rule means that end users should never see the
        url /rewrite-status only /test/status/ both in thier location bar and in hyperlinks
        in your pages.
    </note>
    <from>/rewrite-status</from>
    <to>/test/status/</to>
</outbound-rule>

 <rule>
     <condition name="user-agent">Mozilla/[1-4]</condition>
     <from>/some/page.html</from>
     <to>/some/page-for-old-browsers.html</to>
 </rule>


<outbound-rule>
    <from>^/world.jsp?country=([a-z]+)&amp;city=([a-z]+)$</from>
    <to>/world/$1/$2</to>
</outbound-rule>
-->
 <rule>
     <from>/some/welcome.jsp</from>
     <to>/welcome.jsp</to>
 </rule>                
<rule>
    <from>^/qxxx/cache/images/([_0-9a-zA-Z]+)/([_0-9a-zA-Z]+)/([_.0-9a-zA-Z]+)$</from>
    <to>/qxxx/displayPicture.cache?tName=$1&amp;fName=$2&amp;FLNM=$3</to>
</rule>
<rule>
    <from>^/qxxx/cache/images/([_0-9a-zA-Z]+)-([_0-9a-zA-Z]+)-([0-9]+)-([0-9]+).JPEG$</from>
    <to>/qxxx/tflj/displayPicture?errorPicName=Noname.gif&amp;tName=$1&amp;fName=$2&amp;NUMID=$3&amp;SRCID=$4</to>
</rule>
<rule>
    <from>^/download/video-([_.0-9a-zA-Z\u4E00-\u9FA5\uF900-\uFA2D]+)$</from>
    <to>/video/$1</to>
    <set type="content-type">application/force-download</set>
</rule>    
<!-- 
<outbound-rule>
    <from>^/([_a-zA-Z]+)/qxxx/displayPicture.cache?tName=([_0-9a-zA-Z]+)&amp;fName=([_0-9a-zA-Z]+)&amp;FLNM=([_0-9a-zA-Z]+)</from>
    <to>/$1/qxxx/cache/image/$2/$3/$4</to>
</outbound-rule>-->

<!--

INSTALLATION

    in your web.xml add...

    <filter>
        <filter-name>UrlRewriteFilter</filter-name>
        <filter-class>org.tuckey.web.filters.urlrewrite.UrlRewriteFilter</filter-class>
        <init-param>
            <param-name>logLevel</param-name>
            <param-value>WARN</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>UrlRewriteFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

 EXAMPLES

 Redirect one url
    <rule>
        <from>/some/old/page.html</from>
        <to type="redirect">/very/new/page.html</to>
    </rule>

Redirect a directory
    <rule>
        <from>/some/olddir/(.*)</from>
        <to type="redirect">/very/newdir/$1</to>
    </rule>

Clean a url
    <rule>
        <from>/products/([0-9]+)</from>
        <to>/products/index.jsp?product_id=$1</to>
    </rule>
eg, /products/1234 will be passed on to /products/index.jsp?product_id=1234 without the user noticing.

Browser detection
    <rule>
        <condition name="user-agent">Mozilla/[1-4]</condition>
        <from>/some/page.html</from>
        <to>/some/page-for-old-browsers.html</to>
    </rule>
eg, will pass the request for /some/page.html on to /some/page-for-old-browsers.html only for older
browsers whose user agent srtings match Mozilla/1, Mozilla/2, Mozilla/3 or Mozilla/4.

-->

大家能否讲解一下 配置文件相关 节点说明
谢谢



The rule means that requests to /test/status/ will be redirected to /rewrite-status
the url will be rewritten.

/test/status/
%{context-path}/rewrite-status

表示请求的url
note,说明,注释一样
from 就表示你请求的url(伪造的),经过urlrewrite 转化,就变成to里面的url了。
to表示真正的url、



The outbound-rule specifies that when response.encodeURL is called (if you are using JSTL c:url)
the url /rewrite-status will be rewritten to /test/status/.

        The above rule and this outbound-rule means that end users should never see the 
        url /rewrite-status only /test/status/ both in thier location bar and in hyperlinks 
        in your pages. 
    </note> 
    <from>/rewrite-status</from> 
    <to>/test/status/</to> 
</outbound-rule> 

这个表示应答的url
note说明
from 服务器返回的url
to 经过urlrewrite后的。变成伪造的。

那么真实的就被隐藏掉了。安全性

这个很简单吧! 讨论过好几次了!

[url]http://7454103.iteye.com/blog/476626[/url]

我的帖子你先看下吧! 需要再深入的话咱再讨论! 关.注中

其实很简单,这里面没多少东西,

首先web.xml里的过滤器是不可少的
org.tuckey.web.filters.urlrewrite.UrlRewriteFilter

其次就是rule节点下的from节点和to节点,from是地址栏的url,to是实际请求的地址。

就是你配置from匹配规则,想把什么样的url,转到哪个地址上。。

最后就是outbound-rule,这里面也是from和to。。就是把你的动态url,比如show.do?id=1&name=2正阳的,可以给你转化成你配置的静态规则俄,比如show_1_2.html。

这里给你点参考资料

[url]http://www.blogjava.net/suda/archive/2006/12/30/90962.html[/url]

[url]http://super2.iteye.com/blog/247328[/url]