Class MessageSanitizerContainerResponseFilter
java.lang.Object
org.jboss.resteasy.plugins.interceptors.encoding.MessageSanitizerContainerResponseFilter
- All Implemented Interfaces:
javax.ws.rs.container.ContainerResponseFilter
@Provider
@Priority(4000)
public class MessageSanitizerContainerResponseFilter
extends Object
implements javax.ws.rs.container.ContainerResponseFilter
(RESTEASY-1485) Thwart select XSS attack by escaping special chars in
Exception message.
User: rsearls
Date: 9/16/16
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprivate boolean
containsHtmlText
(ArrayList<Object> list) private String
Replace char with the hex encodingvoid
filter
(javax.ws.rs.container.ContainerRequestContext requestContext, javax.ws.rs.container.ContainerResponseContext responseContext)
-
Field Details
-
replacementMap
-
-
Constructor Details
-
MessageSanitizerContainerResponseFilter
public MessageSanitizerContainerResponseFilter()
-
-
Method Details
-
filter
public void filter(javax.ws.rs.container.ContainerRequestContext requestContext, javax.ws.rs.container.ContainerResponseContext responseContext) throws IOException - Specified by:
filter
in interfacejavax.ws.rs.container.ContainerResponseFilter
- Throws:
IOException
-
escapeXml
Replace char with the hex encoding- Parameters:
str
-- Returns:
-
containsHtmlText
-