Package com.h3xstream.findsecbugs.xss
Class XSSRequestWrapperDetector
- java.lang.Object
-
- com.h3xstream.findsecbugs.xss.XSSRequestWrapperDetector
-
- All Implemented Interfaces:
edu.umd.cs.findbugs.Detector,edu.umd.cs.findbugs.Priorities
public class XSSRequestWrapperDetector extends Object implements edu.umd.cs.findbugs.Detector
Various flavor of XSSRequestWrapper exist to do some debatable prevention. It can be considered as a Web Application Firewall.
Some implementations to detect: http://java.dzone.com/articles/stronger-anti-cross-site http://www.javacodegeeks.com/2012/07/anti-cross-site-scripting-xss-filter.html http://ricardozuasti.com/2012/stronger-anti-cross-site-scripting-xss-filter-for-java-web-apps/
-
-
Constructor Summary
Constructors Constructor Description XSSRequestWrapperDetector(edu.umd.cs.findbugs.BugReporter bugReporter)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description voidreport()voidvisitClassContext(edu.umd.cs.findbugs.ba.ClassContext classContext)
-