Package com.day.cq.xss.taglib
Class ProtectBody
- java.lang.Object
-
- javax.servlet.jsp.tagext.TagSupport
-
- javax.servlet.jsp.tagext.BodyTagSupport
-
- com.day.cq.xss.taglib.ProtectBody
-
- All Implemented Interfaces:
java.io.Serializable
,BodyTag
,IterationTag
,JspTag
,Tag
- Direct Known Subclasses:
ProtectStringAsAttribute
@Deprecated public class ProtectBody extends BodyTagSupport
Deprecated.This class implements a tag that can be used to prevent its body content from containing any XSS stuff.The policy to be used may be specified using the policy attribute.
- See Also:
- Serialized Form
-
-
Field Summary
-
Fields inherited from interface javax.servlet.jsp.tagext.BodyTag
EVAL_BODY_BUFFERED, EVAL_BODY_TAG
-
Fields inherited from interface javax.servlet.jsp.tagext.IterationTag
EVAL_BODY_AGAIN
-
Fields inherited from interface javax.servlet.jsp.tagext.Tag
EVAL_BODY_INCLUDE, EVAL_PAGE, SKIP_BODY, SKIP_PAGE
-
-
Constructor Summary
Constructors Constructor Description ProtectBody()
Deprecated.
-
Method Summary
All Methods Instance Methods Concrete Methods Deprecated Methods Modifier and Type Method Description int
doAfterBody()
Deprecated.Executes the XSS removal.java.lang.String
getContext()
Deprecated.Get the protection context.java.lang.String
getPolicy()
Deprecated.Get the path to the policy to be used.void
setContext(java.lang.String context)
Deprecated.Set the protection context.void
setPolicy(java.lang.String policy)
Deprecated.Set the path to the policy to be used.-
Methods inherited from class javax.servlet.jsp.tagext.BodyTagSupport
doEndTag, doInitBody, doStartTag, getBodyContent, getPreviousOut, release, setBodyContent
-
Methods inherited from class javax.servlet.jsp.tagext.TagSupport
findAncestorWithClass, getId, getParent, getValue, getValues, removeValue, setId, setPageContext, setParent, setValue
-
Methods inherited from class java.lang.Object
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
-
Methods inherited from interface javax.servlet.jsp.tagext.Tag
getParent, setPageContext, setParent
-
-
-
-
Method Detail
-
getPolicy
public java.lang.String getPolicy()
Deprecated.Get the path to the policy to be used.- Returns:
- Path to policy file to use;
null
, if the default policy has to be used
-
setPolicy
public void setPolicy(java.lang.String policy)
Deprecated.Set the path to the policy to be used.- Parameters:
policy
- Path to policy file to use;null
, if the default policy has to be used
-
getContext
public java.lang.String getContext()
Deprecated.Get the protection context.- Returns:
- Attribute name
-
setContext
public void setContext(java.lang.String context)
Deprecated.Set the protection context.- Parameters:
context
- The protection context
-
doAfterBody
public int doAfterBody() throws JspException
Deprecated.Executes the XSS removal.- Specified by:
doAfterBody
in interfaceIterationTag
- Overrides:
doAfterBody
in classBodyTagSupport
- Returns:
- SKIP_BODY
- Throws:
JspException
- if an error occurred while processing this tag- See Also:
BodyTagSupport.doInitBody()
,IterationTag.doAfterBody()
-
-