org.appng.core.controller.filter

## Class XSSFilter

- java.lang.Object
- - org.appng.core.controller.filter.XSSFilter

- All Implemented Interfaces:
    javax.servlet.Filter

      public class XSSFilter
      extends Object
      implements javax.servlet.Filter

  A servlet filter to prevent XSS attacks.
  Inspired by
  - https://dzone.com/articles/stronger-anti-cross-site
  - https://jsoup.org/cookbook/cleaning-html/safelist-sanitizer
  Author:
    Matthias Müller

- - ### Constructor Summary

    Constructors
    Constructor and Description
    `XSSFilter()`

  - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `void` | `destroy()`
    `void` | `doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)`
    `void` | `init(javax.servlet.FilterConfig filterConfig)`

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Constructor Detail

    - #### XSSFilter

          public XSSFilter()

  - ### Method Detail

    - #### doFilter

          public void doFilter(javax.servlet.ServletRequest request,
                               javax.servlet.ServletResponse response,
                               javax.servlet.FilterChain chain)
                        throws IOException,
                               javax.servlet.ServletException

      Specified by:
        `doFilter` in interface `javax.servlet.Filter`
      Throws:
        `IOException`
        `javax.servlet.ServletException`

    - #### init

          public void init(javax.servlet.FilterConfig filterConfig)
                    throws javax.servlet.ServletException

      Specified by:
        `init` in interface `javax.servlet.Filter`
      Throws:
        `javax.servlet.ServletException`

    - #### destroy

          public void destroy()

      Specified by:
        `destroy` in interface `javax.servlet.Filter`

Copyright © 2011–2023 aiticon GmbH. All rights reserved.