Package com.day.cq.xss.taglib

Class ProtectBody

java.lang.Object

javax.servlet.jsp.tagext.TagSupport

javax.servlet.jsp.tagext.BodyTagSupport

com.day.cq.xss.taglib.ProtectBody

All Implemented Interfaces:

Serializable, BodyTag, IterationTag, JspTag, Tag

Direct Known Subclasses:

ProtectStringAsAttribute

@Deprecated
public class ProtectBody
extends BodyTagSupport

Deprecated.

This class implements a tag that can be used to prevent its body content from containing any XSS stuff.

The policy to be used may be specified using the policy attribute.

See Also:

• Serialized Form

Field Summary

Fields inherited from interface javax.servlet.jsp.tagext.BodyTag

EVAL_BODY_BUFFERED, EVAL_BODY_TAG

Fields inherited from interface javax.servlet.jsp.tagext.IterationTag

EVAL_BODY_AGAIN

Fields inherited from interface javax.servlet.jsp.tagext.Tag

EVAL_BODY_INCLUDE, EVAL_PAGE, SKIP_BODY, SKIP_PAGE

Constructor Summary

Constructors

Constructor	Description
ProtectBody()	Deprecated.

Method Summary

Modifier and Type	Method	Description
int	doAfterBody()	Deprecated. Executes the XSS removal.
String	getContext()	Deprecated. Get the protection context.
String	getPolicy()	Deprecated. Get the path to the policy to be used.
void	setContext(String context)	Deprecated. Set the protection context.
void	setPolicy(String policy)	Deprecated. Set the path to the policy to be used.

Methods inherited from class javax.servlet.jsp.tagext.BodyTagSupport

doEndTag, doInitBody, doStartTag, getBodyContent, getPreviousOut, release, setBodyContent

Methods inherited from class javax.servlet.jsp.tagext.TagSupport

findAncestorWithClass, getId, getParent, getValue, getValues, removeValue, setId, setPageContext, setParent, setValue

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.jsp.tagext.Tag

getParent, setPageContext, setParent

Constructor Details

ProtectBody

public ProtectBody()

Deprecated.

Method Details

getPolicy

public String getPolicy()

Deprecated.

Get the path to the policy to be used.

Returns:

Path to policy file to use; null, if the default policy has to be used

setPolicy

public void setPolicy(String policy)

Deprecated.

Set the path to the policy to be used.

Parameters:

policy - Path to policy file to use; null, if the default policy has to be used

getContext

public String getContext()

Deprecated.

Get the protection context.

Returns:

Attribute name

setContext

public void setContext(String context)

Deprecated.

Set the protection context.

Parameters:

context - The protection context

doAfterBody

public int doAfterBody()
                throws JspException

Deprecated.

Executes the XSS removal.

Specified by:

doAfterBody in interface IterationTag

Overrides:

doAfterBody in class BodyTagSupport

Returns:

SKIP_BODY

Throws:

JspException - if an error occurred while processing this tag

See Also:

• BodyTagSupport.doInitBody()
• IterationTag.doAfterBody()