| Package | Description |
|---|---|
| org.owasp.esapi |
The ESAPI interfaces and
Exception classes model the most
important security functions to enterprise web applications. |
| org.owasp.esapi.reference |
This package contains reference implementations of the ESAPI interfaces.
|
| org.owasp.esapi.reference.validation |
This package contains data format-specific validation rule functions.
|
| Modifier and Type | Method and Description |
|---|---|
void |
Validator.assertValidFileUpload(java.lang.String context,
java.lang.String filepath,
java.lang.String filename,
java.io.File parent,
byte[] content,
int maxBytes,
java.util.List<java.lang.String> allowedExtensions,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileUpload with the supplied errorList to capture ValidationExceptions
|
void |
Validator.assertValidHTTPRequestParameterSet(java.lang.String context,
javax.servlet.http.HttpServletRequest request,
java.util.Set<java.lang.String> required,
java.util.Set<java.lang.String> optional,
ValidationErrorList errorList)
Calls getValidHTTPRequestParameterSet with the supplied errorList to capture ValidationExceptions
|
java.lang.Object |
ValidationRule.getValid(java.lang.String context,
java.lang.String input,
ValidationErrorList errorList)
Get a validated value, add the errors to an existing error list
|
java.lang.String |
Validator.getValidCreditCard(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidCreditCard with the supplied errorList to capture ValidationExceptions
|
java.util.Date |
Validator.getValidDate(java.lang.String context,
java.lang.String input,
java.text.DateFormat format,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidDate with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidDirectoryPath(java.lang.String context,
java.lang.String input,
java.io.File parent,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidDirectoryPath with the supplied errorList to capture ValidationExceptions
|
java.lang.Double |
Validator.getValidDouble(java.lang.String context,
java.lang.String input,
double minValue,
double maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidDouble with the supplied errorList to capture ValidationExceptions
|
byte[] |
Validator.getValidFileContent(java.lang.String context,
byte[] input,
int maxBytes,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileContent with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidFileName(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> allowedExtensions,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileName with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
boolean canonicalize,
ValidationErrorList errorList)
Calls getValidInput with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidInput with the supplied errorList to capture ValidationExceptions
|
java.lang.Integer |
Validator.getValidInteger(java.lang.String context,
java.lang.String input,
int minValue,
int maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidInteger with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidListItem(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> list,
ValidationErrorList errorList)
Calls getValidListItem with the supplied errorList to capture ValidationExceptions
|
java.lang.Double |
Validator.getValidNumber(java.lang.String context,
java.lang.String input,
long minValue,
long maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidSafeHTML with the supplied errorList to capture ValidationExceptions
|
char[] |
Validator.getValidPrintable(java.lang.String context,
char[] input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidPrintable with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidPrintable(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidPrintable with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidRedirectLocation(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidRedirectLocation with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
Validator.getValidSafeHTML(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidSafeHTML with the supplied errorList to capture ValidationExceptions
|
boolean |
Validator.isValidCreditCard(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidCreditCard and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidDate(java.lang.String context,
java.lang.String input,
java.text.DateFormat format,
boolean allowNull,
ValidationErrorList errorList)
Calls isValidDate and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidDirectoryPath(java.lang.String context,
java.lang.String input,
java.io.File parent,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidDirectoryPath and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidDouble(java.lang.String context,
java.lang.String input,
double minValue,
double maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidDouble and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidFileContent(java.lang.String context,
byte[] input,
int maxBytes,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileContent and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidFileName(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileName with the default list of allowedExtensions
|
boolean |
Validator.isValidFileName(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> allowedExtensions,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileName and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidFileUpload(java.lang.String context,
java.lang.String filepath,
java.lang.String filename,
java.io.File parent,
byte[] content,
int maxBytes,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidFileUpload and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidHTTPRequestParameterSet(java.lang.String context,
javax.servlet.http.HttpServletRequest request,
java.util.Set<java.lang.String> required,
java.util.Set<java.lang.String> optional,
ValidationErrorList errorList)
Calls assertValidHTTPRequestParameterSet and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
boolean canonicalize,
ValidationErrorList errorList)
Calls isValidInput and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls isValidInput and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidInteger(java.lang.String context,
java.lang.String input,
int minValue,
int maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidInteger and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidListItem(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> list,
ValidationErrorList errorList)
Calls getValidListItem and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidNumber(java.lang.String context,
java.lang.String input,
long minValue,
long maxValue,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidNumber and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidPrintable(java.lang.String context,
char[] input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidPrintable and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidPrintable(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidPrintable and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidRedirectLocation(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidRedirectLocation and returns true if no exceptions are thrown.
|
boolean |
Validator.isValidSafeHTML(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errorList)
Calls getValidSafeHTML and returns true if no exceptions are thrown.
|
| Modifier and Type | Method and Description |
|---|---|
void |
DefaultValidator.assertValidFileUpload(java.lang.String context,
java.lang.String filepath,
java.lang.String filename,
java.io.File parent,
byte[] content,
int maxBytes,
java.util.List<java.lang.String> allowedExtensions,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileUpload with the supplied errorList to capture ValidationExceptions
|
void |
DefaultValidator.assertValidHTTPRequestParameterSet(java.lang.String context,
javax.servlet.http.HttpServletRequest request,
java.util.Set<java.lang.String> required,
java.util.Set<java.lang.String> optional,
ValidationErrorList errors)
ValidationErrorList variant of assertIsValidHTTPRequestParameterSet
Uses current HTTPRequest saved in ESAPI Authenticator
|
java.lang.String |
DefaultValidator.getValidCreditCard(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errors)
Calls getValidCreditCard with the supplied errorList to capture ValidationExceptions
|
java.util.Date |
DefaultValidator.getValidDate(java.lang.String context,
java.lang.String input,
java.text.DateFormat format,
boolean allowNull,
ValidationErrorList errors)
Calls getValidDate with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
DefaultValidator.getValidDirectoryPath(java.lang.String context,
java.lang.String input,
java.io.File parent,
boolean allowNull,
ValidationErrorList errors)
Calls getValidDirectoryPath with the supplied errorList to capture ValidationExceptions
|
java.lang.Double |
DefaultValidator.getValidDouble(java.lang.String context,
java.lang.String input,
double minValue,
double maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidDouble with the supplied errorList to capture ValidationExceptions
|
byte[] |
DefaultValidator.getValidFileContent(java.lang.String context,
byte[] input,
int maxBytes,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileContent with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
DefaultValidator.getValidFileName(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> allowedParameters,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileName with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
DefaultValidator.getValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
boolean canonicalize,
ValidationErrorList errors)
Validates data received from the browser and returns a safe version.
|
java.lang.String |
DefaultValidator.getValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
Validates data received from the browser and returns a safe version.
|
java.lang.Integer |
DefaultValidator.getValidInteger(java.lang.String context,
java.lang.String input,
int minValue,
int maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidInteger with the supplied errorList to capture ValidationExceptions
|
java.lang.String |
DefaultValidator.getValidListItem(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> list,
ValidationErrorList errors)
ValidationErrorList variant of getValidListItem
|
java.lang.Double |
DefaultValidator.getValidNumber(java.lang.String context,
java.lang.String input,
long minValue,
long maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidSafeHTML with the supplied errorList to capture ValidationExceptions
|
char[] |
DefaultValidator.getValidPrintable(java.lang.String context,
char[] input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
ValidationErrorList variant of getValidPrintable
|
java.lang.String |
DefaultValidator.getValidPrintable(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
ValidationErrorList variant of getValidPrintable
|
java.lang.String |
DefaultValidator.getValidRedirectLocation(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errors)
ValidationErrorList variant of getValidRedirectLocation
|
java.lang.String |
DefaultValidator.getValidSafeHTML(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
Calls getValidSafeHTML with the supplied errorList to capture ValidationExceptions
|
boolean |
DefaultValidator.isValidCreditCard(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errors)
Calls getValidCreditCard and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidDate(java.lang.String context,
java.lang.String input,
java.text.DateFormat format,
boolean allowNull,
ValidationErrorList errors)
Calls isValidDate and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidDirectoryPath(java.lang.String context,
java.lang.String input,
java.io.File parent,
boolean allowNull,
ValidationErrorList errors)
Calls getValidDirectoryPath and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidDouble(java.lang.String context,
java.lang.String input,
double minValue,
double maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidDouble and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidFileContent(java.lang.String context,
byte[] input,
int maxBytes,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileContent and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidFileName(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileName with the default list of allowedExtensions
|
boolean |
DefaultValidator.isValidFileName(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> allowedExtensions,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileName and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidFileUpload(java.lang.String context,
java.lang.String directorypath,
java.lang.String filename,
java.io.File parent,
byte[] content,
int maxBytes,
boolean allowNull,
ValidationErrorList errors)
Calls getValidFileUpload and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidHTTPRequestParameterSet(java.lang.String context,
javax.servlet.http.HttpServletRequest request,
java.util.Set<java.lang.String> requiredNames,
java.util.Set<java.lang.String> optionalNames,
ValidationErrorList errors)
Calls assertValidHTTPRequestParameterSet and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
boolean canonicalize,
ValidationErrorList errors) |
boolean |
DefaultValidator.isValidInput(java.lang.String context,
java.lang.String input,
java.lang.String type,
int maxLength,
boolean allowNull,
ValidationErrorList errors) |
boolean |
DefaultValidator.isValidInteger(java.lang.String context,
java.lang.String input,
int minValue,
int maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidInteger and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidListItem(java.lang.String context,
java.lang.String input,
java.util.List<java.lang.String> list,
ValidationErrorList errors)
Calls getValidListItem and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidNumber(java.lang.String context,
java.lang.String input,
long minValue,
long maxValue,
boolean allowNull,
ValidationErrorList errors)
Calls getValidNumber and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidPrintable(java.lang.String context,
char[] input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
Calls getValidPrintable and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidPrintable(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
Calls getValidPrintable and returns true if no exceptions are thrown.
|
boolean |
DefaultValidator.isValidRedirectLocation(java.lang.String context,
java.lang.String input,
boolean allowNull,
ValidationErrorList errors)
Returns true if input is a valid redirect location.
|
boolean |
DefaultValidator.isValidSafeHTML(java.lang.String context,
java.lang.String input,
int maxLength,
boolean allowNull,
ValidationErrorList errors)
Calls getValidSafeHTML and returns true if no exceptions are thrown.
|
| Modifier and Type | Method and Description |
|---|---|
java.lang.Object |
BaseValidationRule.getValid(java.lang.String context,
java.lang.String input,
ValidationErrorList errorList)
Get a validated value, add the errors to an existing error list
|