public class OwaspSanitizer
extends java.lang.Object
| Modifier and Type | Field and Description |
|---|---|
static org.json.simple.JSONArray |
whitelist |
| Constructor and Description |
|---|
OwaspSanitizer() |
| Modifier and Type | Method and Description |
|---|---|
static java.lang.String |
escapeHtml(java.lang.String value) |
static org.owasp.html.PolicyFactory |
getDefaultPolicy()
convenience method for building on default policy
|
static java.lang.String |
sanitizeCustomHtml(java.lang.String value,
org.owasp.html.PolicyFactory sanitizer) |
static java.lang.String |
sanitizeHtml(java.lang.String field,
java.lang.String value)
a basic sanitizer with default whitelist sanitizers
|
static void |
sanitizeMapNumberedField(java.util.Map<java.lang.String,java.lang.Object> map,
java.lang.String subKey) |
static void |
sanitizeTfPackage(com.googlecode.fascinator.common.JsonSimple tfpackage) |
static void |
sanitizeTfPackageField(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey) |
static void |
sanitizeTfPackageNumberedField(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey,
java.lang.String suffixKey) |
static void |
sanitizeTfPackageNumberedFieldAndShadow(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey,
java.lang.String suffixKey,
java.lang.String suffixShadowKey)
tfpackage numbered description text also has escaped value: shadow that needs to be handled
|
public static void sanitizeTfPackage(com.googlecode.fascinator.common.JsonSimple tfpackage)
public static void sanitizeTfPackageField(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey)
public static void sanitizeTfPackageNumberedFieldAndShadow(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey,
java.lang.String suffixKey,
java.lang.String suffixShadowKey)
public static void sanitizeTfPackageNumberedField(com.googlecode.fascinator.common.JsonSimple tfpackage,
java.lang.String baseKey,
java.lang.String suffixKey)
public static void sanitizeMapNumberedField(java.util.Map<java.lang.String,java.lang.Object> map,
java.lang.String subKey)
public static java.lang.String escapeHtml(java.lang.String value)
public static java.lang.String sanitizeHtml(java.lang.String field,
java.lang.String value)
public static java.lang.String sanitizeCustomHtml(java.lang.String value,
org.owasp.html.PolicyFactory sanitizer)
public static org.owasp.html.PolicyFactory getDefaultPolicy()
Copyright © 2009-2019. All Rights Reserved.