fr.paris.lutece.util.http
Class SecurityUtil

java.lang.Object
  extended by fr.paris.lutece.util.http.SecurityUtil

public final class SecurityUtil
extends java.lang.Object

Security utils


Method Summary
static boolean containsCleanParameters(javax.servlet.http.HttpServletRequest request)
          Scan request parameters to see if there no malicious code
static boolean containsXssCharacters(javax.servlet.http.HttpServletRequest request, java.lang.String strString)
          Checks if a String contains characters that could be used for a cross-site scripting attack.
static java.lang.String dumpRequest(javax.servlet.http.HttpServletRequest request)
          Dump all request info
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Method Detail

containsCleanParameters

public static boolean containsCleanParameters(javax.servlet.http.HttpServletRequest request)
Scan request parameters to see if there no malicious code

Parameters:
request - The HTTP request
Returns:
true if all parameters don't contains any special characters

containsXssCharacters

public static boolean containsXssCharacters(javax.servlet.http.HttpServletRequest request,
                                            java.lang.String strString)
Checks if a String contains characters that could be used for a cross-site scripting attack.

Parameters:
request - The HTTP request
strString - a character String
Returns:
true if the String contains illegal characters

dumpRequest

public static java.lang.String dumpRequest(javax.servlet.http.HttpServletRequest request)
Dump all request info

Parameters:
request - The HTTP request
Returns:
A report containing all request info


Copyright © 2011 Mairie de Paris. All Rights Reserved.