springMVC+shiro，用過(guò)濾器處理xss的時(shí)候，request的信息丟失，導(dǎo)致進(jìn)不到controller，該怎么處理？

controller

 @RequiresPermissions("system:role:c")
    @RequestMapping(method = RequestMethod.POST, consumes = MediaType.APPLICATION_JSON_VALUE)
    @ResponseBody
    public ResponseEntity<?> create(@RequestBody RoleRequest roleRequest) {
        Role role = roleRequest.toModel();
 
        return new ResponseEntity(role, HttpStatus.CREATED);
    }