Package org.atmosphere.util

Class XSSHtmlFilter

java.lang.Object

org.atmosphere.util.XSSHtmlFilter

All Implemented Interfaces:

BroadcastFilter

public class XSSHtmlFilter
extends Object
implements BroadcastFilter

Simple BroadcastFilter which automatically filter HTML/HTTP character into proper value, like \n replace by <br>. Using this BroadcastFilter prevent XSS attack.

Author:

Jeanfrancois Arcand

Nested Class Summary

Nested classes/interfaces inherited from interface org.atmosphere.cpr.BroadcastFilter

BroadcastFilter.BroadcastAction

Field Summary

Fields inherited from interface org.atmosphere.cpr.BroadcastFilter

VOID_ATMOSPHERE_RESOURCE_UUID

Constructor Summary

Constructors

Constructor	Description
XSSHtmlFilter()

Method Summary

Modifier and Type	Method	Description
BroadcastFilter.BroadcastAction	filter(String broadcasterId, Object originalMessage, Object o)	Transform a message into a well formed HTML message.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

XSSHtmlFilter

public XSSHtmlFilter()

Method Details

filter

public BroadcastFilter.BroadcastAction filter(String broadcasterId,
 Object originalMessage,
 Object o)

Transform a message into a well formed HTML message.

Specified by:

filter in interface BroadcastFilter

Parameters:

broadcasterId - the Broadcaster.getID() calling this object

originalMessage - The original message which was Broadcaster.broadcast(Object);

o - The object to introspect.

Returns:

a well formed