org.josef.web.servlet

Class EncodeParameterFilter

java.lang.Object

org.josef.web.servlet.EncodeParameterFilter

All Implemented Interfaces:

javax.servlet.Filter

public class EncodeParameterFilter
extends Object
implements javax.servlet.Filter

Filter that encodes request parameters.
Initially this filter was created for Birt since the 4.2.1 version did not encode its parameters, making it vulnerable to client side attacks. To use this filter in your application, add the following xml to your web.xml.

 <filter>
   <filter-name>EncodeParameterFilter</filter-name>
   <filter-class>org.josef.web.servlet.EncodeParameterFilter</filter-class>
 </filter>
  <filter-mapping>
   <filter-name>EncodeParameterFilter</filter-name>
   <url-pattern>/demo/*</url-pattern>
 </filter-mapping>
 

Technical note: This filter does not use an annotation on purpose! A definition in web.xml is needed anyway to supply the url-pattern.
The josef-web-demo shows how to configure this servlet for the EchoParameterServlet.

Version:

1.1 $Revision: 5961 $

Author:

Kees Schotanus

Constructor Summary

Constructors

Constructor and Description
EncodeParameterFilter()

Method Summary

Modifier and Type	Method and Description
void	destroy() Destroys this filter by doing absolutely nothing.
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain) Encodes parameters by wrapping the original request.
void	init(javax.servlet.FilterConfig filterConfig) Initializes this filter by doing absolutely nothing.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncodeParameterFilter

public EncodeParameterFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)

Initializes this filter by doing absolutely nothing.

Specified by:

init in interface javax.servlet.Filter

Parameters:

filterConfig - The Filter configuration.

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain filterChain)
              throws javax.servlet.ServletException,
                     IOException

Encodes parameters by wrapping the original request.

Specified by:

doFilter in interface javax.servlet.Filter

Parameters:

servletRequest - The servlet request.

servletResponse - The servlet response.

filterChain - The filter chain.

Throws:

javax.servlet.ServletException - When another filter in the chain throws this exception.

IOException - When another filter in the chain throws this exception.

destroy

public void destroy()

Destroys this filter by doing absolutely nothing.

Specified by:

destroy in interface javax.servlet.Filter