com.helger.xservlet.filter

Class XServletFilterSecurityPoxy

java.lang.Object

com.helger.xservlet.filter.XServletFilterSecurityPoxy

All Implemented Interfaces:

IXServletLowLevelFilter, Serializable

public class XServletFilterSecurityPoxy
extends Object
implements IXServletLowLevelFilter

Avoid Httpoxy attack using the 'Proxy' HTTP header

Since:

9.0.0

Author:

Philip Helger

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static XServletFilterSecurityPoxy	INSTANCE

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	XServletFilterSecurityPoxy()

Method Summary

Modifier and Type	Method and Description
com.helger.commons.state.EContinue	beforeRequest(javax.servlet.http.HttpServletRequest aHttpRequest, javax.servlet.http.HttpServletResponse aHttpResponse, com.helger.http.EHttpVersion eHttpVersion, com.helger.commons.http.EHttpMethod eHttpMethod) Invoked before an XServlet request is handled.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.helger.xservlet.filter.IXServletLowLevelFilter

afterRequest

Field Detail

INSTANCE

public static final XServletFilterSecurityPoxy INSTANCE

Constructor Detail

XServletFilterSecurityPoxy

protected XServletFilterSecurityPoxy()

Method Detail

beforeRequest

@Nonnull
public com.helger.commons.state.EContinue beforeRequest(@Nonnull
                                                                  javax.servlet.http.HttpServletRequest aHttpRequest,
                                                                  @Nonnull
                                                                  javax.servlet.http.HttpServletResponse aHttpResponse,
                                                                  @Nonnull
                                                                  com.helger.http.EHttpVersion eHttpVersion,
                                                                  @Nonnull
                                                                  com.helger.commons.http.EHttpMethod eHttpMethod)
                                                           throws IOException

Description copied from interface: IXServletLowLevelFilter

Invoked before an XServlet request is handled. This method is created before the request is created! Exceptions occurring in this method will be propagated to the outside, so be careful :)

Specified by:

beforeRequest in interface IXServletLowLevelFilter

Parameters:

aHttpRequest - HTTP servlet request. Never null.

aHttpResponse - HTTP servlet response. Never null.

eHttpVersion - HTTP version. Never null.

eHttpMethod - HTTP method. Never null.

Returns:

EContinue.CONTINUE to continue processing, or EContinue.BREAK if this request should not be processed, in which case the HttpServletResponse must contain a valid response!

Throws:

IOException - in case of IO error.