Examples of XssFilter

com.blogspot.radialmind.xss.XSSFilter
Implementation of a relatively simple XSS filter. This implementation removes dangerous tags and attributes from tags. It does not verify the validity of URL's (that may contain links to JavaScript for example). It does not remove all event handlers that may still contain XSS vulnerabilities. Embedded objects are removed because those may contain XSS vulnerabilities in their own scripting language (ActionScript for Flash for example). Feel free to derive your own implementation from this file. @author gt
com.gitblit.utils.XssFilter
Defines the contract for an XSS filter implementation. @author James Moger
org.apache.hadoop.chukwa.util.XssFilter

Examples of com.gitblit.utils.XssFilter

    settings.overrideSetting(Keys.web.allowLuceneIndexing, false);
    settings.overrideSetting(Keys.git.enableGarbageCollection, false);
    settings.overrideSetting(Keys.git.enableMirroring, false);
    settings.overrideSetting(Keys.web.activityCacheDays, 0);


    XssFilter xssFilter = new AllowXssFilter();
    IRuntimeManager runtimeManager = new RuntimeManager(settings, xssFilter, baseFolder).start();
    IRepositoryManager repositoryManager = new RepositoryManager(runtimeManager, null, null).start();


    String serviceName = settings.getString(Keys.tickets.service, BranchTicketService.class.getSimpleName());
    if (StringUtils.isEmpty(serviceName)) {

View Full Code Here

Examples of com.gitblit.utils.XssFilter

        htpasswd = newHtpasswdAuthentication(getSettings());
        auth = newAuthenticationManager(getSettings());
    }


    private HtpasswdAuthProvider newHtpasswdAuthentication(IStoredSettings settings) {
      XssFilter xssFilter = new AllowXssFilter();
      RuntimeManager runtime = new RuntimeManager(settings, xssFilter, GitBlitSuite.BASEFOLDER).start();
      UserManager users = new UserManager(runtime, null).start();
      HtpasswdAuthProvider htpasswd = new HtpasswdAuthProvider();
      htpasswd.setup(runtime, users);
      return htpasswd;

View Full Code Here

Examples of com.gitblit.utils.XssFilter

      htpasswd.setup(runtime, users);
      return htpasswd;
    }


    private AuthenticationManager newAuthenticationManager(IStoredSettings settings) {
      XssFilter xssFilter = new AllowXssFilter();
      RuntimeManager runtime = new RuntimeManager(settings, xssFilter, GitBlitSuite.BASEFOLDER).start();
      UserManager users = new UserManager(runtime, null).start();
      HtpasswdAuthProvider htpasswd = new HtpasswdAuthProvider();
      htpasswd.setup(runtime, users);
      AuthenticationManager auth = new AuthenticationManager(runtime, users);

View Full Code Here

Examples of com.gitblit.utils.XssFilter

    ldap = newLdapAuthentication(settings);
    auth = newAuthenticationManager(settings);
  }


  private LdapAuthProvider newLdapAuthentication(IStoredSettings settings) {
    XssFilter xssFilter = new AllowXssFilter();
    RuntimeManager runtime = new RuntimeManager(settings, xssFilter, GitBlitSuite.BASEFOLDER).start();
    userManager = new UserManager(runtime, null).start();
    LdapAuthProvider ldap = new LdapAuthProvider();
    ldap.setup(runtime, userManager);
    return ldap;

View Full Code Here

Examples of com.gitblit.utils.XssFilter

    ldap.setup(runtime, userManager);
    return ldap;
  }


  private AuthenticationManager newAuthenticationManager(IStoredSettings settings) {
    XssFilter xssFilter = new AllowXssFilter();
    RuntimeManager runtime = new RuntimeManager(settings, xssFilter, GitBlitSuite.BASEFOLDER).start();
    AuthenticationManager auth = new AuthenticationManager(runtime, userManager);
    auth.addAuthenticationProvider(newLdapAuthentication(settings));
    return auth;
  }

View Full Code Here

Examples of org.apache.hadoop.chukwa.util.XssFilter

    this.SIZE_X = w;
    this.SIZE_Y = h;
  }
  
  public Heatmap(HttpServletRequest request) {
    XssFilter xf = new XssFilter(request);
    this.offline_use = false;
    this.request = request;
    HttpSession session = request.getSession();
    this.cluster = session.getAttribute("cluster").toString();
    String query_state = xf.getParameter("query_state");
    if (query_state != null) {
      this.query_state = new String(query_state);
    } else {
      this.query_state = new String("read");
    }
    String query_stat_type = xf.getParameter("query_stat_type");
    if (query_stat_type != null) {
      this.query_stat_type = new String(query_stat_type);
    } else {
      this.query_stat_type = new String("transaction_count");
    }

View Full Code Here

Examples of org.apache.hadoop.chukwa.util.XssFilter

    resp.sendError(HttpServletResponse.SC_METHOD_NOT_ALLOWED); 
  }


  public void doGet(HttpServletRequest request, HttpServletResponse response)
      throws IOException, ServletException {
    xf = new XssFilter(request);
    response.setContentType("text/plain");
    String method = xf.getParameter("method");
    if (method.equals("get_views_list")) {
      getViewsList(request, response);
    }

View Full Code Here

Examples of org.apache.hadoop.chukwa.util.XssFilter

    }
    
  }
  
  public Swimlanes(HttpServletRequest request) {
    XssFilter xf = new XssFilter(request);
    this.offline_use = false;
    this.request = request;
    HttpSession session = request.getSession();
    this.cluster = session.getAttribute("cluster").toString();
      String evt_type = xf.getParameter("event_type");
    if (evt_type != null) {
      this.shuffle_option = new String(evt_type);
    } else {
      this.shuffle_option = new String("noshuffle");
    }

View Full Code Here

Examples of org.apache.hadoop.chukwa.util.XssFilter

  private boolean displayPercentage = false;
  private String[] seriesOrder = null;
  private XssFilter xf = null;
  
  public Chart(HttpServletRequest request) {
    xf = new XssFilter(request);
    if (request != null && xf.getParameter("boxId") != null) {
      this.id = xf.getParameter("boxId");
    } else {
      this.id = "0";
    }

View Full Code Here

Examples of org.apache.hadoop.chukwa.util.XssFilter

      end = parseDateShorthand(endString);
  }
    }


  public void init(HttpServletRequest request) {
    xf = new XssFilter(request);
    Calendar now = Calendar.getInstance();
    this.session = request.getSession();
    if (request.getParameter("time_type") == null
        && session.getAttribute("time_type") == null
        && session.getAttribute("period") == null

View Full Code Here

0 1 2 3

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.