org.hippoecm.hst.container

Class XSSUrlFilter

java.lang.Object

org.hippoecm.hst.container.XSSUrlFilter

All Implemented Interfaces:

javax.servlet.Filter

public class XSSUrlFilter
extends Object
implements javax.servlet.Filter

Simple XSS Url attack protection blocking access whenever the request url contains a < or > character.

Constructor Summary

Constructors

Constructor and Description
XSSUrlFilter()

Method Summary

Modifier and Type	Method and Description
static boolean	containsMarkups(String value)
void	destroy()
void	doFilter(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig config)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XSSUrlFilter

public XSSUrlFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig config)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

doFilter

public void doFilter(javax.servlet.ServletRequest req,
                     javax.servlet.ServletResponse res,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

containsMarkups

public static boolean containsMarkups(String value)

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter