org.apache.hadoop.hbase.http

Class HttpServer.QuotingInputFilter

java.lang.Object

org.apache.hadoop.hbase.http.HttpServer.QuotingInputFilter

Enclosing class:

HttpServer

public static class HttpServer.QuotingInputFilter
extends java.lang.Object

A Servlet input filter that quotes all HTML active characters in the parameter names and values. The goal is to quote the characters to make all of the servlets resistant to cross-site scripting attacks.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	HttpServer.QuotingInputFilter.RequestQuoter

Constructor Summary

Constructors

Constructor and Description
QuotingInputFilter()

Method Summary

Modifier and Type	Method and Description
void	destroy()
void	doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
void	init(FilterConfig config)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

QuotingInputFilter

public QuotingInputFilter()

Method Detail

init

public void init(FilterConfig config)
          throws ServletException

Throws:

ServletException

destroy

public void destroy()

doFilter

public void doFilter(ServletRequest request,
                     ServletResponse response,
                     FilterChain chain)
              throws java.io.IOException,
                     ServletException

Throws:

java.io.IOException

ServletException