Package org.silverpeas.core.web.filter

Class MassiveWebSecurityFilter

java.lang.Object

org.silverpeas.core.web.filter.MassiveWebSecurityFilter

All Implemented Interfaces:

javax.servlet.Filter

public class MassiveWebSecurityFilter
extends Object
implements javax.servlet.Filter

Massive Web Security Protection.

For now, this filter ensures HTTPS is used in secured connections, blocks content sniffing of web browsers, and checks XSS and SQL injections in URLs.

Author:

Yohann Chastagnier

Constructor Summary

Constructors

Constructor	Description
MassiveWebSecurityFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MassiveWebSecurityFilter

public MassiveWebSecurityFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter