当前位置: 首页>>代码示例>>Java>>正文

Java AntiSamy.scan方法代码示例

本文整理汇总了Java中org.owasp.validator.html.AntiSamy.scan方法的典型用法代码示例。如果您正苦于以下问题：Java AntiSamy.scan方法的具体用法？Java AntiSamy.scan怎么用？Java AntiSamy.scan使用的例子？那么, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类org.owasp.validator.html.AntiSamy的用法示例。


在下文中一共展示了AntiSamy.scan方法的4个代码示例，这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞，您的评价将有助于系统推荐出更棒的Java代码示例。

示例1: XSSSanitize

import org.owasp.validator.html.AntiSamy; //导入方法依赖的package包/类
public static String XSSSanitize(String html, String policyString)
		throws Exception {
	if (html == null)
		return "";
	if (policyString == null)
		throw new Exception("Unable to perform XSS sanitization: policyString is null");
	
	String filename = Core.getConfiguration().getResourcesPath() + File.separator
			+ "communitycommons" + File.separator + "antisamy"
			+ File.separator + "antisamy-" + policyString + "-1.4.4.xml";

	AntiSamy as = new AntiSamy(); // Create AntiSamy object
	Policy p = Policy.getInstance(filename);
	try {
		CleanResults cr = as.scan(html, p, AntiSamy.SAX);
		return cr.getCleanHTML();
	} catch (Exception e) {
		throw new Exception("Unable to perform XSS sanitization: "
				+ e.getMessage(), e);
	}
}
开发者ID:appronto，项目名称:RedisConnector，代码行数:22，代码来源:StringUtils.java

示例2: XSSSanitize

import org.owasp.validator.html.AntiSamy; //导入方法依赖的package包/类
public static String XSSSanitize(String html, String policyString)
		throws Exception {
	if (html == null)
		return "";
	if (policyString == null)
		throw new Exception("Unable to perform XSS sanitization: policyString is null");

	String filename = Core.getConfiguration().getResourcesPath() + File.separator
			+ "communitycommons" + File.separator + "antisamy"
			+ File.separator + "antisamy-" + policyString + "-1.4.4.xml";

	AntiSamy as = new AntiSamy(); // Create AntiSamy object
	Policy p = Policy.getInstance(filename);
	try {
		CleanResults cr = as.scan(html, p, AntiSamy.SAX);
		return cr.getCleanHTML();
	} catch (Exception e) {
		throw new Exception("Unable to perform XSS sanitization: "
				+ e.getMessage(), e);
	}
}
开发者ID:mendix，项目名称:CommunityCommons，代码行数:22，代码来源:StringUtils.java

示例3: createPost

import org.owasp.validator.html.AntiSamy; //导入方法依赖的package包/类
/**
 * creates a new survey definition
 * @param proceed
 * @param surveyDefinition
 * @param bindingResult
 * @param uiModel
 * @param httpServletRequest
 * @param principal
 * @return
 */
@Secured({"ROLE_ADMIN","ROLE_SURVEY_ADMIN"})
@RequestMapping(method = RequestMethod.POST, produces = "text/html")
public String createPost (@RequestParam(value = "_proceed", required = false) String proceed,
						  @Valid SurveyDefinition surveyDefinition, 
						  BindingResult bindingResult, 
						  Principal principal,
						  Model uiModel, 
						  HttpServletRequest httpServletRequest){
	try {
		String login = principal.getName();
		User user = userService.user_findByLogin(login);
		//Check if the user is authorized
		if(!securityService.userBelongsToDepartment(surveyDefinition.getDepartment().getId(), user) &&
			!securityService.userIsAuthorizedToManageSurvey(surveyDefinition.getId(), user)	) {
			log.warn("Unauthorized access to url path " + httpServletRequest.getPathInfo() + " attempted by user login:" + principal.getName() + "from IP:" + httpServletRequest.getLocalAddr());
			return "accessDenied";	
		}

		if(proceed != null){
			if (bindingResult.hasErrors()) {
				populateEditForm(uiModel, surveyDefinition, user);
				return "settings/surveyDefinitions/create";
			}	
			if (!surveySettingsService.surveyDefinition_ValidateNameIsUnique(surveyDefinition)) {
				bindingResult.rejectValue("name", "field_unique");
				populateEditForm(uiModel, surveyDefinition, user);
				return "settings/surveyDefinitions/create";
			}
			
			//if(surveyDefinition.getSendAutoReminders() == true){
				//bindingResult.rejectValue("autoRemindersWeeklyOccurrence", "field_unique");
				
		//	}	
			
			
			Policy emailTemplatePolicy = Policy.getInstance(this.getClass().getResource(POLICY_FILE_LOCATION));
			AntiSamy emailAs = new AntiSamy();
			CleanResults crEmail = emailAs.scan(surveyDefinition.getEmailInvitationTemplate(), emailTemplatePolicy);
			surveyDefinition.setEmailInvitationTemplate(crEmail.getCleanHTML());
			
			Policy completedSurveyPolicy = Policy.getInstance(this.getClass().getResource(POLICY_FILE_LOCATION));
			AntiSamy completedSurveyAs = new AntiSamy();
			CleanResults crCompletedSurvey = completedSurveyAs.scan(surveyDefinition.getCompletedSurveyTemplate(), completedSurveyPolicy);
			surveyDefinition.setCompletedSurveyTemplate(crCompletedSurvey.getCleanHTML());
			
		
			
			uiModel.asMap().clear();
			surveyDefinition = surveySettingsService.surveyDefinition_merge(surveyDefinition);
			return "redirect:/settings/surveyDefinitions/" + encodeUrlPathSegment(surveyDefinition.getId().toString(), httpServletRequest );
		}
		else{
			return "redirect:/settings/surveyDefinitions";
		}
	}

	catch (Exception e) {
		log.error(e.getMessage(),e);
		throw (new RuntimeException(e));
	}
}
开发者ID:JD-Software，项目名称:JDeSurvey，代码行数:72，代码来源:SurveyDefinitionController.java

示例4: update

import org.owasp.validator.html.AntiSamy; //导入方法依赖的package包/类
/**
 * Updates a survey definition   
 * @param proceed
 * @param surveyDefinition
 * @param bindingResult
 * @param uiModel
 * @param httpServletRequest
 * @param principal
 * @return
 */
@Secured({"ROLE_ADMIN","ROLE_SURVEY_ADMIN"})
@RequestMapping(method = RequestMethod.PUT, produces = "text/html")
public String update(@RequestParam(value = "_proceed", required = false) String proceed,
					 @Valid SurveyDefinition surveyDefinition, 
					 BindingResult bindingResult,
					 Principal principal,
					 Model uiModel, 
					 HttpServletRequest httpServletRequest) {
	
	
	try{
		String login = principal.getName();
		User user = userService.user_findByLogin(login);
		//Check if the user is authorized
		if(!securityService.userIsAuthorizedToManageSurvey(surveyDefinition.getId(), user) &&
		   !securityService.userBelongsToDepartment(surveyDefinition.getDepartment().getId(), user)	) {
			log.warn("Unauthorized access to url path " + httpServletRequest.getPathInfo() + " attempted by user login:" + principal.getName() + "from IP:" + httpServletRequest.getLocalAddr());
			return "accessDenied";	
		}
		
		if(proceed != null){
			if (bindingResult.hasErrors()) {
				populateEditForm(uiModel, surveyDefinition, user);
				return "settings/surveyDefinitions/update";
			}
			if (!surveySettingsService.surveyDefinition_ValidateNameIsUnique(surveyDefinition)) {
				bindingResult.rejectValue("name", "field_unique");
				populateEditForm(uiModel, surveyDefinition, user);
				return "settings/surveyDefinitions/update";
			}
			System.out.println("!!!!!!!!! MD: " + surveyDefinition.getAllowMultipleSubmissions() + " #################### PUB: " + surveyDefinition.getIsPublic());
			Policy emailTemplatePolicy = Policy.getInstance(this.getClass().getResource(POLICY_FILE_LOCATION));
			AntiSamy emailAs = new AntiSamy();
			CleanResults crEmail = emailAs.scan(surveyDefinition.getEmailInvitationTemplate(), emailTemplatePolicy);
			surveyDefinition.setEmailInvitationTemplate(crEmail.getCleanHTML());
			
			Policy completedSurveyPolicy = Policy.getInstance(this.getClass().getResource(POLICY_FILE_LOCATION));
			AntiSamy completedSurveyAs = new AntiSamy();
			CleanResults crCompletedSurvey = completedSurveyAs.scan(surveyDefinition.getCompletedSurveyTemplate(), completedSurveyPolicy);
			surveyDefinition.setCompletedSurveyTemplate(crCompletedSurvey.getCleanHTML());
						
			
			uiModel.asMap().clear();
			surveyDefinition = surveySettingsService.surveyDefinition_merge(surveyDefinition);
			System.out.println("!!!!!!!!! MD: " + surveyDefinition.getAllowMultipleSubmissions() + " #################### PUB: " + surveyDefinition.getIsPublic());
			return "settings/surveyDefinitions/saved";
			

		}else{
			return "redirect:/settings/surveyDefinitions/" + encodeUrlPathSegment(surveyDefinition.getId().toString(), httpServletRequest);
		}
	} catch (Exception e) {
		log.error(e.getMessage(),e);
		throw (new RuntimeException(e));
	}
}
开发者ID:JD-Software，项目名称:JDeSurvey，代码行数:67，代码来源:SurveyDefinitionController.java


注：本文中的org.owasp.validator.html.AntiSamy.scan方法示例由纯净天空整理自Github/MSDocs等开源代码及文档管理平台，相关代码片段筛选自各路编程大神贡献的开源项目，源码版权归原作者所有，传播和使用请参考对应项目的License；未经允许，请勿转载。