edu.cornell.mannlib.vitro.webapp.edit.n3editing.configuration.validators

Class AntiXssValidation

java.lang.Object

edu.cornell.mannlib.vitro.webapp.edit.n3editing.configuration.validators.AntiXssValidation

All Implemented Interfaces:

N3ValidatorVTwo

public class AntiXssValidation
extends Object
implements N3ValidatorVTwo

Check if the submitted text has potential XSS problems. Error messages from this validator always start with XSS_ERROR_MESSAGE

Author:

bdc34

Field Summary

Fields

Modifier and Type	Field and Description
static String	XSS_ERROR_MESSAGE All error messages will start with this string.

Constructor Summary

Constructors

Constructor and Description
AntiXssValidation() Validate all fields on submission.
AntiXssValidation(List<String> fieldNamesToValidate) Validate only fields specified in fieldNamesToValidate.

Method Summary

Modifier and Type	Method and Description
protected Map<String,String>	checkSubmissionForField(String fieldName, MultiValueEditSubmission editSub) Check for XSS for a single field.
Map<String,String>	validate(EditConfigurationVTwo editConfig, MultiValueEditSubmission editSub)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

XSS_ERROR_MESSAGE

public static String XSS_ERROR_MESSAGE

All error messages will start with this string.

Constructor Detail

AntiXssValidation

public AntiXssValidation()

Validate all fields on submission.

AntiXssValidation

public AntiXssValidation(List<String> fieldNamesToValidate)

Validate only fields specified in fieldNamesToValidate.

Method Detail

validate

public Map<String,String> validate(EditConfigurationVTwo editConfig,
                                   MultiValueEditSubmission editSub)

Specified by:

validate in interface N3ValidatorVTwo

checkSubmissionForField

protected Map<String,String> checkSubmissionForField(String fieldName,
                                                     MultiValueEditSubmission editSub)

Check for XSS for a single field. Returns NO_ERROR if there are no errors so it can be added to a map with putAll()