com.day.cq.wcm.foundation

Class ExpressionSecurityValidator

java.lang.Object

com.day.cq.wcm.foundation.ExpressionSecurityValidator

public class ExpressionSecurityValidator
extends java.lang.Object

Security validator for EL expressions to prevent injection attacks. This validator checks expressions for dangerous patterns before they are evaluated.

Constructor Summary

Constructors

Constructor and Description
ExpressionSecurityValidator()

Method Summary

Modifier and Type	Method and Description
static java.lang.String	sanitizeExpression(java.lang.String expression) Sanitizes an expression by removing or escaping dangerous content This is a fallback method - validation should be preferred
static void	validateExpression(java.lang.String expr) Deprecated.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExpressionSecurityValidator

public ExpressionSecurityValidator()

Method Detail

validateExpression

@Deprecated
public static void validateExpression(java.lang.String expr)

Deprecated.

sanitizeExpression

public static java.lang.String sanitizeExpression(java.lang.String expression)

Sanitizes an expression by removing or escaping dangerous content This is a fallback method - validation should be preferred