fr.paris.lutece.portal.web.xss
Class SafeRequestFilter
java.lang.Object
fr.paris.lutece.portal.web.xss.SafeRequestFilter
- All Implemented Interfaces:
- javax.servlet.Filter
- Direct Known Subclasses:
- SafeRequestFilterAdmin, SafeRequestFilterSite
public abstract class SafeRequestFilter
- extends Object
- implements javax.servlet.Filter
A rewrite of the HttpServletRequestWrapper for escaping xss characters which
could be contained inside the request
Method Summary |
void |
destroy()
|
void |
doFilter(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
javax.servlet.FilterChain chain)
|
protected abstract String |
getMessageUrl(javax.servlet.http.HttpServletRequest request,
String strMessageKey,
Object[] messageArgs,
String strTitleKey)
Forward the error message url depends site or admin implementation |
void |
init(javax.servlet.FilterConfig config)
|
Methods inherited from class java.lang.Object |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
SafeRequestFilter
public SafeRequestFilter()
init
public void init(javax.servlet.FilterConfig config)
throws javax.servlet.ServletException
-
- Specified by:
init
in interface javax.servlet.Filter
- Throws:
javax.servlet.ServletException
destroy
public void destroy()
-
- Specified by:
destroy
in interface javax.servlet.Filter
doFilter
public void doFilter(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
javax.servlet.FilterChain chain)
throws IOException,
javax.servlet.ServletException
-
- Specified by:
doFilter
in interface javax.servlet.Filter
- Throws:
IOException
javax.servlet.ServletException
getMessageUrl
protected abstract String getMessageUrl(javax.servlet.http.HttpServletRequest request,
String strMessageKey,
Object[] messageArgs,
String strTitleKey)
- Forward the error message url depends site or admin implementation
- Parameters:
request
- @HttpServletRequeststrMessageKey
- the message keymessageArgs
- the message argsstrTitleKey
- the title of the message
- Returns:
- url
Copyright © 2014 Mairie de Paris. All Rights Reserved.