org.owasp.esapi.waf.configuration

Class AppGuardianConfiguration

java.lang.Object

org.owasp.esapi.waf.configuration.AppGuardianConfiguration

public class AppGuardianConfiguration
extends java.lang.Object

This class is the object model of the policy file. Also holds a number of constants used throughout the WAF.

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.List<Rule>	afterBodyRules
private java.util.HashMap<java.lang.String,java.lang.Object>	aliases
private java.util.List<Rule>	beforeBodyRules
private java.util.List<Rule>	beforeResponseRules
static int	BLOCK
private java.util.List<Rule>	cookieRules
static java.lang.String	DEFAULT_CHARACTER_ENCODING
static java.lang.String	DEFAULT_CONTENT_TYPE
static int	DEFAULT_FAIL_ACTION
private java.lang.String	defaultErrorPage
private int	defaultResponseCode
private boolean	forceHttpOnlyFlagToSession
private boolean	forceSecureFlagToSession
static java.lang.String	JAVASCRIPT_REDIRECT
static java.lang.String	JAVASCRIPT_TARGET_TOKEN
static int	LOG
static java.lang.String	LOG_DIRECTORY
static org.apache.log4j.Level	LOG_LEVEL
private java.lang.String	logDirectory
private org.apache.log4j.Level	logLevel
static int	OPERATOR_CONTAINS
static int	OPERATOR_EQ
static int	OPERATOR_EXISTS
static int	OPERATOR_IN_LIST
static int	REDIRECT
private java.lang.String	sessionCookieName

Constructor Summary

Constructors

Constructor and Description
AppGuardianConfiguration()

Method Summary

Modifier and Type	Method and Description
void	addAfterBodyRule(Rule r)
void	addAlias(java.lang.String key, java.lang.Object obj)
void	addBeforeBodyRule(Rule r)
void	addBeforeResponseRule(Rule r)
void	addCookieRule(Rule r)
java.util.List<Rule>	getAfterBodyRules()
java.util.List<Rule>	getBeforeBodyRules()
java.util.List<Rule>	getBeforeResponseRules()
java.util.List<Rule>	getCookieRules()
java.lang.String	getDefaultErrorPage()
int	getDefaultResponseCode()
java.lang.String	getLogDirectory() Deprecated.
org.apache.log4j.Level	getLogLevel() Deprecated.
java.lang.String	getSessionCookieName()
boolean	isUsingHttpOnlyFlagOnSessionCookie()
boolean	isUsingSecureFlagOnSessionCookie()
void	setApplyHTTPOnlyFlagToSessionCookie(boolean shouldApply)
void	setApplySecureFlagToSessionCookie(boolean shouldApply)
void	setDefaultErrorPage(java.lang.String defaultErrorPage)
void	setDefaultResponseCode(int defaultResponseCode)
void	setLogDirectory(java.lang.String dir) Deprecated.
void	setLogLevel(org.apache.log4j.Level level) Deprecated.
void	setSessionCookieName(java.lang.String sessionCookieName)
java.lang.String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

LOG

public static final int LOG

See Also:

Constant Field Values

REDIRECT

public static final int REDIRECT

See Also:

Constant Field Values

BLOCK

public static final int BLOCK

See Also:

Constant Field Values

OPERATOR_EQ

public static final int OPERATOR_EQ

See Also:

Constant Field Values

OPERATOR_CONTAINS

public static final int OPERATOR_CONTAINS

See Also:

Constant Field Values

OPERATOR_IN_LIST

public static final int OPERATOR_IN_LIST

See Also:

Constant Field Values

OPERATOR_EXISTS

public static final int OPERATOR_EXISTS

See Also:

Constant Field Values

LOG_LEVEL

public static org.apache.log4j.Level LOG_LEVEL

LOG_DIRECTORY

public static java.lang.String LOG_DIRECTORY

logLevel

private org.apache.log4j.Level logLevel

logDirectory

private java.lang.String logDirectory

DEFAULT_FAIL_ACTION

public static int DEFAULT_FAIL_ACTION

DEFAULT_CHARACTER_ENCODING

public static java.lang.String DEFAULT_CHARACTER_ENCODING

DEFAULT_CONTENT_TYPE

public static java.lang.String DEFAULT_CONTENT_TYPE

JAVASCRIPT_TARGET_TOKEN

public static final java.lang.String JAVASCRIPT_TARGET_TOKEN

See Also:

Constant Field Values

JAVASCRIPT_REDIRECT

public static final java.lang.String JAVASCRIPT_REDIRECT

See Also:

Constant Field Values

aliases

private java.util.HashMap<java.lang.String,java.lang.Object> aliases

defaultErrorPage

private java.lang.String defaultErrorPage

defaultResponseCode

private int defaultResponseCode

forceHttpOnlyFlagToSession

private boolean forceHttpOnlyFlagToSession

forceSecureFlagToSession

private boolean forceSecureFlagToSession

sessionCookieName

private java.lang.String sessionCookieName

beforeBodyRules

private java.util.List<Rule> beforeBodyRules

afterBodyRules

private java.util.List<Rule> afterBodyRules

beforeResponseRules

private java.util.List<Rule> beforeResponseRules

cookieRules

private java.util.List<Rule> cookieRules

Constructor Detail

AppGuardianConfiguration

public AppGuardianConfiguration()

Method Detail

getSessionCookieName

public java.lang.String getSessionCookieName()

setSessionCookieName

public void setSessionCookieName(java.lang.String sessionCookieName)

getLogLevel

@Deprecated
public org.apache.log4j.Level getLogLevel()

Deprecated.

setLogLevel

@Deprecated
public void setLogLevel(org.apache.log4j.Level level)

Deprecated.

setLogDirectory

@Deprecated
public void setLogDirectory(java.lang.String dir)

Deprecated.

getLogDirectory

@Deprecated
public java.lang.String getLogDirectory()

Deprecated.

getDefaultErrorPage

public java.lang.String getDefaultErrorPage()

setDefaultErrorPage

public void setDefaultErrorPage(java.lang.String defaultErrorPage)

getDefaultResponseCode

public int getDefaultResponseCode()

setDefaultResponseCode

public void setDefaultResponseCode(int defaultResponseCode)

addAlias

public void addAlias(java.lang.String key,
                     java.lang.Object obj)

getBeforeBodyRules

public java.util.List<Rule> getBeforeBodyRules()

getAfterBodyRules

public java.util.List<Rule> getAfterBodyRules()

getBeforeResponseRules

public java.util.List<Rule> getBeforeResponseRules()

getCookieRules

public java.util.List<Rule> getCookieRules()

addBeforeBodyRule

public void addBeforeBodyRule(Rule r)

addAfterBodyRule

public void addAfterBodyRule(Rule r)

addBeforeResponseRule

public void addBeforeResponseRule(Rule r)

addCookieRule

public void addCookieRule(Rule r)

setApplyHTTPOnlyFlagToSessionCookie

public void setApplyHTTPOnlyFlagToSessionCookie(boolean shouldApply)

setApplySecureFlagToSessionCookie

public void setApplySecureFlagToSessionCookie(boolean shouldApply)

isUsingHttpOnlyFlagOnSessionCookie

public boolean isUsingHttpOnlyFlagOnSessionCookie()

isUsingSecureFlagOnSessionCookie

public boolean isUsingSecureFlagOnSessionCookie()

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object