Package skyview.request
Class SkyViewDetainter
- java.lang.Object
-
- skyview.request.Detainter
-
- skyview.request.SkyViewDetainter
-
public class SkyViewDetainter extends Detainter
This class defines string patterns and rules that are used to do taint checking for Skyview CGI calls. A hash map of acceptable character patterns is created upon construction and are matched against user input associated with each CGI parameter. If the pattern for a CGI parameter is not found the input is checked for characters that are not allowed. Some parameters such as survey name are checked against a pattern of allowed characters and then checked again to make sure certain sequences of allowed characters are not present.
-
-
Constructor Summary
Constructors Constructor Description SkyViewDetainter()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description boolean
checkInvalid(java.util.regex.Pattern pattern, java.lang.String name, java.lang.String input)
boolean
isValid(java.util.regex.Pattern pattern, java.lang.String name, java.lang.String input)
boolean
validate(java.lang.String name, java.lang.String input)
-
Methods inherited from class skyview.request.Detainter
addPattern, getPattern
-
-
-
-
Method Detail
-
validate
public boolean validate(java.lang.String name, java.lang.String input) throws java.lang.Exception
-
isValid
public boolean isValid(java.util.regex.Pattern pattern, java.lang.String name, java.lang.String input) throws java.lang.Exception
- Throws:
java.lang.Exception
-
checkInvalid
public boolean checkInvalid(java.util.regex.Pattern pattern, java.lang.String name, java.lang.String input) throws java.lang.Exception
- Throws:
java.lang.Exception
-
-