org.owasp.esapi.waf.configuration

Class AppGuardianConfiguration

java.lang.Object

org.owasp.esapi.waf.configuration.AppGuardianConfiguration

public class AppGuardianConfiguration
extends Object

This class is the object model of the policy file. Also holds a number of constants used throughout the WAF.

Author:

Arshan Dabirsiaghi

Field Summary

Fields

Modifier and Type	Field and Description
static int	BLOCK
static String	DEFAULT_CHARACTER_ENCODING
static String	DEFAULT_CONTENT_TYPE
static int	DEFAULT_FAIL_ACTION
static String	JAVASCRIPT_REDIRECT
static String	JAVASCRIPT_TARGET_TOKEN
static int	LOG
static String	LOG_DIRECTORY
static org.apache.log4j.Level	LOG_LEVEL
static int	OPERATOR_CONTAINS
static int	OPERATOR_EQ
static int	OPERATOR_EXISTS
static int	OPERATOR_IN_LIST
static int	REDIRECT

Constructor Summary

Constructors

Constructor and Description
AppGuardianConfiguration()

Method Summary

Methods

Modifier and Type	Method and Description
void	addAfterBodyRule(Rule r)
void	addAlias(String key, Object obj)
void	addBeforeBodyRule(Rule r)
void	addBeforeResponseRule(Rule r)
void	addCookieRule(Rule r)
List<Rule>	getAfterBodyRules()
List<Rule>	getBeforeBodyRules()
List<Rule>	getBeforeResponseRules()
List<Rule>	getCookieRules()
String	getDefaultErrorPage()
int	getDefaultResponseCode()
String	getLogDirectory() Deprecated.
org.apache.log4j.Level	getLogLevel() Deprecated.
String	getSessionCookieName()
boolean	isUsingHttpOnlyFlagOnSessionCookie()
boolean	isUsingSecureFlagOnSessionCookie()
void	setApplyHTTPOnlyFlagToSessionCookie(boolean shouldApply)
void	setApplySecureFlagToSessionCookie(boolean shouldApply)
void	setDefaultErrorPage(String defaultErrorPage)
void	setDefaultResponseCode(int defaultResponseCode)
void	setLogDirectory(String dir) Deprecated.
void	setLogLevel(org.apache.log4j.Level level) Deprecated.
void	setSessionCookieName(String sessionCookieName)
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

LOG

public static final int LOG

See Also:

Constant Field Values

REDIRECT

public static final int REDIRECT

See Also:

Constant Field Values

BLOCK

public static final int BLOCK

See Also:

Constant Field Values

OPERATOR_EQ

public static final int OPERATOR_EQ

See Also:

Constant Field Values

OPERATOR_CONTAINS

public static final int OPERATOR_CONTAINS

See Also:

Constant Field Values

OPERATOR_IN_LIST

public static final int OPERATOR_IN_LIST

See Also:

Constant Field Values

OPERATOR_EXISTS

public static final int OPERATOR_EXISTS

See Also:

Constant Field Values

LOG_LEVEL

public static org.apache.log4j.Level LOG_LEVEL

LOG_DIRECTORY

public static String LOG_DIRECTORY

DEFAULT_FAIL_ACTION

public static int DEFAULT_FAIL_ACTION

DEFAULT_CHARACTER_ENCODING

public static String DEFAULT_CHARACTER_ENCODING

DEFAULT_CONTENT_TYPE

public static String DEFAULT_CONTENT_TYPE

JAVASCRIPT_TARGET_TOKEN

public static final String JAVASCRIPT_TARGET_TOKEN

See Also:

Constant Field Values

JAVASCRIPT_REDIRECT

public static final String JAVASCRIPT_REDIRECT

See Also:

Constant Field Values

Constructor Detail

AppGuardianConfiguration

public AppGuardianConfiguration()

Method Detail

getSessionCookieName

public String getSessionCookieName()

setSessionCookieName

public void setSessionCookieName(String sessionCookieName)

getLogLevel

@Deprecated
public org.apache.log4j.Level getLogLevel()

Deprecated.

setLogLevel

@Deprecated
public void setLogLevel(org.apache.log4j.Level level)

Deprecated.

setLogDirectory

@Deprecated
public void setLogDirectory(String dir)

Deprecated.

getLogDirectory

@Deprecated
public String getLogDirectory()

Deprecated.

getDefaultErrorPage

public String getDefaultErrorPage()

setDefaultErrorPage

public void setDefaultErrorPage(String defaultErrorPage)

getDefaultResponseCode

public int getDefaultResponseCode()

setDefaultResponseCode

public void setDefaultResponseCode(int defaultResponseCode)

addAlias

public void addAlias(String key,
            Object obj)

getBeforeBodyRules

public List<Rule> getBeforeBodyRules()

getAfterBodyRules

public List<Rule> getAfterBodyRules()

getBeforeResponseRules

public List<Rule> getBeforeResponseRules()

getCookieRules

public List<Rule> getCookieRules()

addBeforeBodyRule

public void addBeforeBodyRule(Rule r)

addAfterBodyRule

public void addAfterBodyRule(Rule r)

addBeforeResponseRule

public void addBeforeResponseRule(Rule r)

addCookieRule

public void addCookieRule(Rule r)

setApplyHTTPOnlyFlagToSessionCookie

public void setApplyHTTPOnlyFlagToSessionCookie(boolean shouldApply)

setApplySecureFlagToSessionCookie

public void setApplySecureFlagToSessionCookie(boolean shouldApply)

isUsingHttpOnlyFlagOnSessionCookie

public boolean isUsingHttpOnlyFlagOnSessionCookie()

isUsingSecureFlagOnSessionCookie

public boolean isUsingSecureFlagOnSessionCookie()

toString

public String toString()

Overrides:

toString in class Object