org.owasp.esapi.waf.internal
Class InterceptingHTTPServletRequest

java.lang.Object
  javax.servlet.ServletRequestWrapper
      javax.servlet.http.HttpServletRequestWrapper
          org.owasp.esapi.waf.internal.InterceptingHTTPServletRequest

All Implemented Interfaces:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public class InterceptingHTTPServletRequest
extends javax.servlet.http.HttpServletRequestWrapper

The wrapper for the HttpServletRequest object which will be passed to the application being protected by the WAF. It contains logic for parsing multipart parameters out of the request and provided downstream application logic a way of accessing it like it hasn't been touched.

Author:

Arshan Dabirsiaghi

Field Summary

Fields inherited from interface javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

Constructor Summary

InterceptingHTTPServletRequest(javax.servlet.http.HttpServletRequest request)

Method Summary

java.lang.String	getDictionaryParameter(java.lang.String s)
java.util.Enumeration	getDictionaryParameterNames()
javax.servlet.ServletInputStream	getInputStream()
java.io.BufferedReader	getReader()

Methods inherited from class javax.servlet.http.HttpServletRequestWrapper

getAuthType, getContextPath, getCookies, getDateHeader, getHeader, getHeaderNames, getHeaders, getIntHeader, getMethod, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isUserInRole

Methods inherited from class javax.servlet.ServletRequestWrapper

getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, isSecure, removeAttribute, setAttribute, setCharacterEncoding, setRequest

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.ServletRequest

getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentType, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, isSecure, removeAttribute, setAttribute, setCharacterEncoding

Constructor Detail

InterceptingHTTPServletRequest

public InterceptingHTTPServletRequest(javax.servlet.http.HttpServletRequest request)
                               throws org.apache.commons.fileupload.FileUploadException,
                                      java.io.IOException

Throws:

org.apache.commons.fileupload.FileUploadException

java.io.IOException

Method Detail

getInputStream

public javax.servlet.ServletInputStream getInputStream()
                                                throws java.io.IOException

Specified by:

getInputStream in interface javax.servlet.ServletRequest

Overrides:

getInputStream in class javax.servlet.ServletRequestWrapper

Throws:

java.io.IOException

getReader

public java.io.BufferedReader getReader()
                                 throws java.io.IOException

Specified by:

getReader in interface javax.servlet.ServletRequest

Overrides:

getReader in class javax.servlet.ServletRequestWrapper

Throws:

java.io.IOException

getDictionaryParameter

public java.lang.String getDictionaryParameter(java.lang.String s)

getDictionaryParameterNames

public java.util.Enumeration getDictionaryParameterNames()