Package com.day.cq.xss.taglib

Class ProtectStringAsAttribute

java.lang.Object

javax.servlet.jsp.tagext.TagSupport

javax.servlet.jsp.tagext.BodyTagSupport

com.day.cq.xss.taglib.ProtectBody

com.day.cq.xss.taglib.ProtectStringAsAttribute

All Implemented Interfaces:

Serializable, BodyTag, IterationTag, JspTag, Tag

@Deprecated
public class ProtectStringAsAttribute
extends ProtectBody

Deprecated.

This class implements a tag that can be used for protecting a String that is provided as a request attribute.

See Also:

• Serialized Form

Field Summary

Fields inherited from interface javax.servlet.jsp.tagext.BodyTag

EVAL_BODY_BUFFERED, EVAL_BODY_TAG

Fields inherited from interface javax.servlet.jsp.tagext.IterationTag

EVAL_BODY_AGAIN

Fields inherited from interface javax.servlet.jsp.tagext.Tag

EVAL_BODY_INCLUDE, EVAL_PAGE, SKIP_BODY, SKIP_PAGE

Constructor Summary

Constructors

Constructor	Description
ProtectStringAsAttribute()	Deprecated.

Method Summary

Modifier and Type	Method	Description
int	doAfterBody()	Deprecated. Executes the XSS removal and sets the cleaned HTML to the request attribute as specified.
String	getName()	Deprecated. Get the name of the attribute where the result is saved to.
void	setName(String name)	Deprecated. Set the name to the attribute where the result is saved to.

Methods inherited from class com.day.cq.xss.taglib.ProtectBody

getContext, getPolicy, setContext, setPolicy

Methods inherited from class javax.servlet.jsp.tagext.BodyTagSupport

doEndTag, doInitBody, doStartTag, getBodyContent, getPreviousOut, release, setBodyContent

Methods inherited from class javax.servlet.jsp.tagext.TagSupport

findAncestorWithClass, getId, getParent, getValue, getValues, removeValue, setId, setPageContext, setParent, setValue

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.jsp.tagext.Tag

getParent, setPageContext, setParent

Constructor Details

ProtectStringAsAttribute

public ProtectStringAsAttribute()

Deprecated.

Method Details

getName

public String getName()

Deprecated.

Get the name of the attribute where the result is saved to.

Returns:

Attribute name

setName

public void setName(String name)

Deprecated.

Set the name to the attribute where the result is saved to.

Parameters:

name - Attribute name

doAfterBody

public int doAfterBody()
                throws JspException

Deprecated.

Executes the XSS removal and sets the cleaned HTML to the request attribute as specified.

Specified by:

doAfterBody in interface IterationTag

Overrides:

doAfterBody in class ProtectBody

Returns:

SKIP_BODY

Throws:

JspException - if an error occurred while processing this tag

See Also:

• BodyTagSupport.doInitBody()
• IterationTag.doAfterBody()