SecurityUtil (Apache Tomcat 6.0.53 API Documentation)

Overview

Package

Class

Tree

Deprecated

Index

Help

Apache Tomcat 6.0.53

PREV CLASS NEXT CLASS

FRAMES NO FRAMES

SUMMARY: NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

org.apache.jasper.security
Class SecurityUtil

java.lang.Object
  org.apache.jasper.security.SecurityUtil

public final class SecurityUtil
extends java.lang.Object
extends java.lang.Object

Util class for Security related operations.

Author:: Jean-Francois Arcand

Constructor Summary
`SecurityUtil()`

Method Summary
`static java.lang.String`	`filter(java.lang.String message)` Filter the specified message string for characters that are sensitive in HTML.
`static boolean`	`isPackageProtectionEnabled()` Return the `SecurityManager` only if Security is enabled AND package protection mechanism is enabled.

Methods inherited from class java.lang.Object
`clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

Constructor Detail

SecurityUtil

public SecurityUtil()

Method Detail

isPackageProtectionEnabled

public static boolean isPackageProtectionEnabled()

Return the SecurityManager only if Security is enabled AND package protection mechanism is enabled.

filter

public static java.lang.String filter(java.lang.String message)

Filter the specified message string for characters that are sensitive in HTML. This avoids potential attacks caused by including JavaScript codes in the request URL that is often reported in error messages.

Parameters:: message - The message string to be filtered