spring3mvc怎么过滤非法关键字？

public class LoginInterceptor implements HandlerInterceptor {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object o) throws Exception {
        //Controller访问前进行拦截，允许通过返回true，否则返回false
        ......
    }
    @Override
    public void postHandle(HttpServletRequest hsr, HttpServletResponse hsr1, Object o, ModelAndView mav) throws Exception {
    }

    @Override
    public void afterCompletion(HttpServletRequest hsr, HttpServletResponse hsr1, Object o, Exception excptn) throws Exception {
    }
}
在dispatcher-servlet.xml配置相关拦截

 

<mvc:interceptors>
        <!-- 拦截所有 -->
        <bean class="com.inscre.crm.web.interceptor.LoginInterceptor" />
        <!-- 部分拦截 **为通配符 -->
        <mvc:interceptor>
            <mvc:mapping path="/customer_type/list/**" />
            <bean class="com.inscre.crm.web.interceptor.PermissionInterceptor" />
        </mvc:interceptor>
</mvc:interceptors>