Class MessageSanitizerContainerResponseFilter

java.lang.Object
org.jboss.resteasy.plugins.interceptors.encoding.MessageSanitizerContainerResponseFilter
All Implemented Interfaces:
javax.ws.rs.container.ContainerResponseFilter

@Provider @Priority(4000) public class MessageSanitizerContainerResponseFilter extends Object implements javax.ws.rs.container.ContainerResponseFilter
(RESTEASY-1485) Thwart select XSS attack by escaping special chars in Exception message. User: rsearls Date: 9/16/16
  • Field Details

  • Constructor Details

    • MessageSanitizerContainerResponseFilter

      public MessageSanitizerContainerResponseFilter()
  • Method Details

    • filter

      public void filter(javax.ws.rs.container.ContainerRequestContext requestContext, javax.ws.rs.container.ContainerResponseContext responseContext) throws IOException
      Specified by:
      filter in interface javax.ws.rs.container.ContainerResponseFilter
      Throws:
      IOException
    • escapeXml

      private String escapeXml(String str)
      Replace char with the hex encoding
      Parameters:
      str -
      Returns:
    • containsHtmlText

      private boolean containsHtmlText(ArrayList<Object> list)