HttpURLConnection 的安全使用

问题描述

当使用 HttpURLConnection 时，如果我们不获取"并使用它，是否需要关闭 InputStream?

When using HttpURLConnection does the InputStream need to be closed if we do not 'get' and use it?

即这样安全吗?

HttpURLConnection conn = (HttpURLConnection) uri.getURI().toURL().openConnection();
conn.connect();
// check for content type I don't care about
if (conn.getContentType.equals("image/gif") return;
// get stream and read from it
InputStream is = conn.getInputStream();
try {
    // read from is
} finally {
    is.close();
}

其次，在 InputStream 的所有内容都被完全读取之前关闭它是否安全?

Secondly, is it safe to close an InputStream before all of it's content has been fully read?

是否存在使底层套接字处于 ESTABLISHED 甚至 CLOSE_WAIT 状态的风险?

Is there a risk of leaving the underlying socket in ESTABLISHED or even CLOSE_WAIT state?

推荐答案

您需要在关闭之前读取输入流中的所有数据，以便缓存底层 TCP 连接.我已经读过，在最新的 Java 中不应该需要它，但它总是被要求读取整个响应以重新使用连接.

You need to read all of the data in the input stream before you close it so that the underlying TCP connection gets cached. I have read that it should not be required in latest Java, but it was always mandated to read the whole response for connection re-use.

查看这篇文章:keep-alive injava6

这篇关于HttpURLConnection 的安全使用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！