Class HttpServer.QuotingInputFilter.RequestQuoter

java.lang.Object
javax.servlet.ServletRequestWrapper
javax.servlet.http.HttpServletRequestWrapper
org.apache.hadoop.hbase.http.HttpServer.QuotingInputFilter.RequestQuoter
All Implemented Interfaces:
javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest
Enclosing class:
HttpServer.QuotingInputFilter

public static class HttpServer.QuotingInputFilter.RequestQuoter extends javax.servlet.http.HttpServletRequestWrapper
  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    private final javax.servlet.http.HttpServletRequest
     

    Fields inherited from interface javax.servlet.http.HttpServletRequest

    BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH
  • Constructor Summary

    Constructors
    Constructor
    Description
    RequestQuoter(javax.servlet.http.HttpServletRequest rawRequest)
     
  • Method Summary

    Modifier and Type
    Method
    Description
    Unquote the name and quote the value.
     
    Return the set of parameter names, quoting each name.
     
    Quote the url so that users specifying the HOST HTTP header can't inject attacks.
    Quote the server name so that users specifying the HOST HTTP header can't inject attacks.

    Methods inherited from class javax.servlet.http.HttpServletRequestWrapper

    authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeader, getHeaderNames, getHeaders, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getServletPath, getSession, getSession, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isUserInRole, login, logout, upgrade

    Methods inherited from class javax.servlet.ServletRequestWrapper

    getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface javax.servlet.ServletRequest

    getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync
  • Field Details

    • rawRequest

      private final javax.servlet.http.HttpServletRequest rawRequest
  • Constructor Details

    • RequestQuoter

      public RequestQuoter(javax.servlet.http.HttpServletRequest rawRequest)
  • Method Details

    • getParameterNames

      Return the set of parameter names, quoting each name.
      Specified by:
      getParameterNames in interface javax.servlet.ServletRequest
      Overrides:
      getParameterNames in class javax.servlet.ServletRequestWrapper
    • getParameter

      public String getParameter(String name)
      Unquote the name and quote the value.
      Specified by:
      getParameter in interface javax.servlet.ServletRequest
      Overrides:
      getParameter in class javax.servlet.ServletRequestWrapper
    • getParameterValues

      public String[] getParameterValues(String name)
      Specified by:
      getParameterValues in interface javax.servlet.ServletRequest
      Overrides:
      getParameterValues in class javax.servlet.ServletRequestWrapper
    • getParameterMap

      Specified by:
      getParameterMap in interface javax.servlet.ServletRequest
      Overrides:
      getParameterMap in class javax.servlet.ServletRequestWrapper
    • getRequestURL

      Quote the url so that users specifying the HOST HTTP header can't inject attacks.
      Specified by:
      getRequestURL in interface javax.servlet.http.HttpServletRequest
      Overrides:
      getRequestURL in class javax.servlet.http.HttpServletRequestWrapper
    • getServerName

      Quote the server name so that users specifying the HOST HTTP header can't inject attacks.
      Specified by:
      getServerName in interface javax.servlet.ServletRequest
      Overrides:
      getServerName in class javax.servlet.ServletRequestWrapper