Package com.day.cq.wcm.foundation

Class ExpressionSecurityValidator

  • public class ExpressionSecurityValidator
extends java.lang.Object
    Security validator for EL expressions to prevent injection attacks. This validator checks expressions for dangerous patterns before they are evaluated.

    • Method Summary

      All Methods Static Methods Concrete Methods Deprecated Methods 
      Modifier and Type Method Description
      static java.lang.String sanitizeExpression​(java.lang.String expression)
      Sanitizes an expression by removing or escaping dangerous content This is a fallback method - validation should be preferred
      static void validateExpression​(java.lang.String expr)
      Deprecated.

      • Methods inherited from class java.lang.Object

        equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • ExpressionSecurityValidator

        public ExpressionSecurityValidator()

    • Method Detail

      • validateExpression

        @Deprecated
public static void validateExpression​(java.lang.String expr)
        Deprecated.

      • sanitizeExpression

        public static java.lang.String sanitizeExpression​(java.lang.String expression)
        Sanitizes an expression by removing or escaping dangerous content This is a fallback method - validation should be preferred