Package com.day.cq.xss.taglib

Class ProtectBody

  • All Implemented Interfaces:
    java.io.Serializable, javax.servlet.jsp.tagext.BodyTag, javax.servlet.jsp.tagext.IterationTag, javax.servlet.jsp.tagext.JspTag, javax.servlet.jsp.tagext.Tag
    Direct Known Subclasses:
    ProtectStringAsAttribute
    @Deprecated
public class ProtectBody
extends javax.servlet.jsp.tagext.BodyTagSupport
    Deprecated.
    This class implements a tag that can be used to prevent its body content from containing any XSS stuff.

    The policy to be used may be specified using the policy attribute.

    See Also:
    Serialized Form

    • Field Summary

      • Fields inherited from interface javax.servlet.jsp.tagext.BodyTag

        EVAL_BODY_BUFFERED, EVAL_BODY_TAG

      • Fields inherited from interface javax.servlet.jsp.tagext.IterationTag

        EVAL_BODY_AGAIN

      • Fields inherited from interface javax.servlet.jsp.tagext.Tag

        EVAL_BODY_INCLUDE, EVAL_PAGE, SKIP_BODY, SKIP_PAGE

    • Constructor Summary

      Constructors 
      Constructor Description
      ProtectBody()
      Deprecated.
       

    • Method Summary

      All Methods Instance Methods Concrete Methods Deprecated Methods 
      Modifier and Type Method Description
      int doAfterBody()
      Deprecated.
      Executes the XSS removal.
      java.lang.String getContext()
      Deprecated.
      Get the protection context.
      java.lang.String getPolicy()
      Deprecated.
      Get the path to the policy to be used.
      void setContext​(java.lang.String context)
      Deprecated.
      Set the protection context.
      void setPolicy​(java.lang.String policy)
      Deprecated.
      Set the path to the policy to be used.

      • Methods inherited from class javax.servlet.jsp.tagext.BodyTagSupport

        doEndTag, doInitBody, doStartTag, getBodyContent, getPreviousOut, release, setBodyContent

      • Methods inherited from class javax.servlet.jsp.tagext.TagSupport

        findAncestorWithClass, getId, getParent, getValue, getValues, removeValue, setId, setPageContext, setParent, setValue

      • Methods inherited from class java.lang.Object

        equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

      • Methods inherited from interface javax.servlet.jsp.tagext.Tag

        getParent, setPageContext, setParent

    • Constructor Detail

      • ProtectBody

        public ProtectBody()
        Deprecated.

    • Method Detail

      • getPolicy

        public java.lang.String getPolicy()
        Deprecated.
        Get the path to the policy to be used.
        Returns:
        Path to policy file to use; null, if the default policy has to be used

      • setPolicy

        public void setPolicy​(java.lang.String policy)
        Deprecated.
        Set the path to the policy to be used.
        Parameters:
        policy - Path to policy file to use; null, if the default policy has to be used

      • getContext

        public java.lang.String getContext()
        Deprecated.
        Get the protection context.
        Returns:
        Attribute name

      • setContext

        public void setContext​(java.lang.String context)
        Deprecated.
        Set the protection context.
        Parameters:
        context - The protection context

      • doAfterBody

        public int doAfterBody()
                throws javax.servlet.jsp.JspException
        Deprecated.
        Executes the XSS removal.
        Specified by:
        doAfterBody in interface javax.servlet.jsp.tagext.IterationTag
        Overrides:
        doAfterBody in class javax.servlet.jsp.tagext.BodyTagSupport
        Throws:
        javax.servlet.jsp.JspException