Package org.wso2.carbon.ui.filters

Class CRLFPreventionFilter

java.lang.Object

org.wso2.carbon.ui.filters.CRLFPreventionFilter

All Implemented Interfaces:

javax.servlet.Filter

public class CRLFPreventionFilter
extends Object
implements javax.servlet.Filter

Prevent Injection of Carriage Return (CR) and Line Feed (LF) characters in response headers. The filter wraps the HttpServletResponse and sanitizes response header values for CR and LF.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
protected static class	CRLFPreventionFilter.CRLFResponseWrapper

Constructor Summary

Constructors

Constructor	Description
CRLFPreventionFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain)
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CRLFPreventionFilter

public CRLFPreventionFilter()

Method Details

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
 javax.servlet.ServletResponse servletResponse,
 javax.servlet.FilterChain filterChain)
              throws IOException,
javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter