org.owasp.esapi.waf.internal

Class InterceptingHTTPServletRequest

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

org.owasp.esapi.waf.internal.InterceptingHTTPServletRequest

All Implemented Interfaces:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class InterceptingHTTPServletRequest
extends javax.servlet.http.HttpServletRequestWrapper

The wrapper for the HttpServletRequest object which will be passed to the application being protected by the WAF. It contains logic for parsing multipart parameters out of the request and provided downstream application logic a way of accessing it like it hasn't been touched.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private class	InterceptingHTTPServletRequest.RAFInputStream

Field Summary

Fields

Modifier and Type	Field and Description
private java.util.Vector<java.lang.String>	allParameterNames
private java.util.Vector<Parameter>	allParameters
private static int	CHUNKED_BUFFER_SIZE
private InterceptingHTTPServletRequest.RAFInputStream	is
private boolean	isMultipart
private java.io.RandomAccessFile	requestBody

Fields inherited from interface javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

Constructor Summary

Constructors

Constructor and Description
InterceptingHTTPServletRequest(javax.servlet.http.HttpServletRequest request)

Method Summary

Modifier and Type	Method and Description
java.lang.String	getDictionaryParameter(java.lang.String s)
java.util.Enumeration	getDictionaryParameterNames()
javax.servlet.ServletInputStream	getInputStream()
java.io.BufferedReader	getReader()

Methods inherited from class javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeader, getHeaderNames, getHeaders, getHttpServletMapping, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getTrailerFields, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isTrailerFieldsReady, isUserInRole, login, logout, newPushBuilder, upgrade

Methods inherited from class javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

Field Detail

allParameters

private java.util.Vector<Parameter> allParameters

allParameterNames

private java.util.Vector<java.lang.String> allParameterNames

CHUNKED_BUFFER_SIZE

private static int CHUNKED_BUFFER_SIZE

isMultipart

private boolean isMultipart

requestBody

private java.io.RandomAccessFile requestBody

is

private InterceptingHTTPServletRequest.RAFInputStream is

Constructor Detail

InterceptingHTTPServletRequest

public InterceptingHTTPServletRequest(javax.servlet.http.HttpServletRequest request)
                               throws org.apache.commons.fileupload.FileUploadException,
                                      java.io.IOException

Throws:

org.apache.commons.fileupload.FileUploadException

java.io.IOException

Method Detail

getInputStream

public javax.servlet.ServletInputStream getInputStream()
                                                throws java.io.IOException

Specified by:

getInputStream in interface javax.servlet.ServletRequest

Overrides:

getInputStream in class javax.servlet.ServletRequestWrapper

Throws:

java.io.IOException

getReader

public java.io.BufferedReader getReader()
                                 throws java.io.IOException

Specified by:

getReader in interface javax.servlet.ServletRequest

Overrides:

getReader in class javax.servlet.ServletRequestWrapper

Throws:

java.io.IOException

getDictionaryParameter

public java.lang.String getDictionaryParameter(java.lang.String s)

getDictionaryParameterNames

public java.util.Enumeration getDictionaryParameterNames()