Hierarchy For All Packages

Package Hierarchies:

• org.owasp.esapi,
• org.owasp.esapi.codecs,
• org.owasp.esapi.configuration,
• org.owasp.esapi.configuration.consts,
• org.owasp.esapi.crypto,
• org.owasp.esapi.errors,
• org.owasp.esapi.filters,
• org.owasp.esapi.reference,
• org.owasp.esapi.reference.accesscontrol,
• org.owasp.esapi.reference.accesscontrol.policyloader,
• org.owasp.esapi.reference.crypto,
• org.owasp.esapi.reference.validation,
• org.owasp.esapi.tags,
• org.owasp.esapi.util,
• org.owasp.esapi.waf,
• org.owasp.esapi.waf.actions,
• org.owasp.esapi.waf.configuration,
• org.owasp.esapi.waf.internal,
• org.owasp.esapi.waf.rules

Class Hierarchy

• java.lang.Object
  • org.owasp.esapi.reference.AbstractAccessReferenceMap<K> (implements org.owasp.esapi.AccessReferenceMap<K>)
    • org.owasp.esapi.reference.IntegerAccessReferenceMap
    • org.owasp.esapi.reference.RandomAccessReferenceMap
  • org.owasp.esapi.reference.AbstractAuthenticator (implements org.owasp.esapi.Authenticator)
    • org.owasp.esapi.reference.FileBasedAuthenticator
  • org.owasp.esapi.configuration.AbstractPrioritizedPropertyLoader (implements java.lang.Comparable<T>, org.owasp.esapi.configuration.EsapiPropertyLoader)
    • org.owasp.esapi.configuration.StandardEsapiPropertyLoader
    • org.owasp.esapi.configuration.XmlEsapiPropertyLoader
  • org.owasp.esapi.reference.accesscontrol.policyloader.ACRParameterLoaderHelper
  • org.owasp.esapi.reference.accesscontrol.policyloader.ACRPolicyFileLoader
  • org.owasp.esapi.waf.actions.Action
    • org.owasp.esapi.waf.actions.BlockAction
    • org.owasp.esapi.waf.actions.DefaultAction
    • org.owasp.esapi.waf.actions.DoNothingAction
    • org.owasp.esapi.waf.actions.RedirectAction
  • org.owasp.esapi.waf.configuration.AppGuardianConfiguration
  • org.owasp.esapi.codecs.Base64
  • org.owasp.esapi.reference.accesscontrol.BaseACR<P,R> (implements org.owasp.esapi.AccessControlRule<P,R>)
    • org.owasp.esapi.reference.accesscontrol.AlwaysFalseACR
    • org.owasp.esapi.reference.accesscontrol.AlwaysTrueACR
    • org.owasp.esapi.reference.accesscontrol.DelegatingACR
    • org.owasp.esapi.reference.accesscontrol.policyloader.EchoDynaBeanPolicyParameterACR
    • org.owasp.esapi.reference.accesscontrol.EchoRuntimeParameterACR
  • org.owasp.esapi.reference.validation.BaseValidationRule (implements org.owasp.esapi.ValidationRule)
    • org.owasp.esapi.reference.validation.CreditCardValidationRule
    • org.owasp.esapi.reference.validation.DateValidationRule
    • org.owasp.esapi.reference.validation.IntegerValidationRule
    • org.owasp.esapi.reference.validation.NumberValidationRule
    • org.owasp.esapi.reference.validation.StringValidationRule
      • org.owasp.esapi.reference.validation.HTMLValidationRule
  • org.owasp.esapi.util.ByteConversionUtil
  • org.apache.log4j.Category (implements org.apache.log4j.spi.AppenderAttachable)
    • org.apache.log4j.Logger
      • org.owasp.esapi.reference.Log4JLogger (implements org.owasp.esapi.Logger)
  • org.owasp.esapi.crypto.CipherSpec (implements java.io.Serializable)
  • org.owasp.esapi.crypto.CipherText (implements java.io.Serializable)
  • org.owasp.esapi.crypto.CipherTextSerializer
  • org.owasp.esapi.filters.ClickjackFilter (implements javax.servlet.Filter)
  • org.owasp.esapi.codecs.Codec
    • org.owasp.esapi.codecs.CSSCodec
    • org.owasp.esapi.codecs.DB2Codec
    • org.owasp.esapi.codecs.HTMLEntityCodec
    • org.owasp.esapi.codecs.JavaScriptCodec
    • org.owasp.esapi.codecs.MySQLCodec
    • org.owasp.esapi.codecs.OracleCodec
    • org.owasp.esapi.codecs.PercentCodec
    • org.owasp.esapi.codecs.UnixCodec
    • org.owasp.esapi.codecs.VBScriptCodec
    • org.owasp.esapi.codecs.WindowsCodec
    • org.owasp.esapi.codecs.XMLEntityCodec
  • org.owasp.esapi.util.CollectionsUtil
  • org.owasp.esapi.waf.configuration.ConfigurationParser
  • org.owasp.esapi.crypto.CryptoDiscoverer
  • org.owasp.esapi.crypto.CryptoHelper
  • org.owasp.esapi.crypto.CryptoToken
  • org.owasp.esapi.reference.DefaultAccessController (implements org.owasp.esapi.AccessController)
  • org.owasp.esapi.reference.DefaultEncoder (implements org.owasp.esapi.Encoder)
  • org.owasp.esapi.reference.crypto.DefaultEncryptedProperties (implements org.owasp.esapi.EncryptedProperties)
  • org.owasp.esapi.reference.DefaultExecutor (implements org.owasp.esapi.Executor)
  • org.owasp.esapi.reference.DefaultHTTPUtilities (implements org.owasp.esapi.HTTPUtilities)
  • org.owasp.esapi.reference.DefaultIntrusionDetector (implements org.owasp.esapi.IntrusionDetector)
  • org.owasp.esapi.util.DefaultMessageUtil
  • org.owasp.esapi.reference.DefaultRandomizer (implements org.owasp.esapi.Randomizer)
  • org.owasp.esapi.reference.DefaultSecurityConfiguration (implements org.owasp.esapi.SecurityConfiguration)
  • org.owasp.esapi.reference.DefaultUser (implements java.io.Serializable, org.owasp.esapi.User)
  • org.owasp.esapi.reference.DefaultValidator (implements org.owasp.esapi.Validator)
  • java.util.Dictionary<K,V>
    • java.util.Hashtable<K,V> (implements java.lang.Cloneable, java.util.Map<K,V>, java.io.Serializable)
      • java.util.Properties
        • org.owasp.esapi.reference.crypto.ReferenceEncryptedProperties (implements org.owasp.esapi.EncryptedProperties)
  • org.owasp.esapi.reference.accesscontrol.DynaBeanACRParameter (implements org.owasp.esapi.reference.accesscontrol.policyloader.PolicyParameters)
  • org.owasp.esapi.reference.accesscontrol.policyloader.DynaBeanACRParameterLoader (implements org.owasp.esapi.reference.accesscontrol.policyloader.ACRParameterLoader<T>)
  • org.owasp.esapi.tags.ELEncodeFunctions
  • org.owasp.esapi.EncoderConstants
  • org.owasp.esapi.reference.crypto.EncryptedPropertiesUtils
  • org.owasp.esapi.ESAPI
  • org.owasp.esapi.filters.ESAPIFilter (implements javax.servlet.Filter)
  • org.owasp.esapi.configuration.EsapiPropertyLoaderFactory
  • org.owasp.esapi.configuration.EsapiPropertyManager (implements org.owasp.esapi.configuration.EsapiPropertyLoader)
  • org.owasp.esapi.waf.ESAPIWebApplicationFirewallFilter (implements javax.servlet.Filter)
  • org.owasp.esapi.ExecuteResult
  • org.owasp.esapi.reference.accesscontrol.ExperimentalAccessController (implements org.owasp.esapi.AccessController)
  • java.io.File (implements java.lang.Comparable<T>, java.io.Serializable)
    • org.owasp.esapi.SafeFile
  • org.owasp.esapi.reference.accesscontrol.FileBasedACRs
  • org.owasp.esapi.codecs.HashTrie<T> (implements org.owasp.esapi.codecs.Trie<T>)
  • org.owasp.esapi.codecs.Hex
  • java.io.InputStream (implements java.io.Closeable)
    • java.io.FilterInputStream
      • org.owasp.esapi.codecs.Base64.InputStream
  • org.owasp.esapi.reference.crypto.JavaEncryptor (implements org.owasp.esapi.Encryptor)
  • org.owasp.esapi.reference.JavaLogFactory (implements org.owasp.esapi.LogFactory)
  • org.owasp.esapi.crypto.KeyDerivationFunction
  • java.util.logging.Level (implements java.io.Serializable)
    • org.owasp.esapi.reference.JavaLogFactory.JavaLoggerLevel
  • org.owasp.esapi.reference.Log4JLogFactory (implements org.owasp.esapi.LogFactory)
  • org.owasp.esapi.reference.Log4JLoggerFactory (implements org.apache.log4j.spi.LoggerFactory)
  • org.owasp.esapi.Logger.EventType
  • org.owasp.esapi.util.NullSafe
  • org.owasp.esapi.util.ObjFactory
  • java.io.OutputStream (implements java.io.Closeable, java.io.Flushable)
    • java.io.FilterOutputStream
      • org.owasp.esapi.codecs.Base64.OutputStream
    • javax.servlet.ServletOutputStream
      • org.owasp.esapi.waf.internal.InterceptingServletOutputStream
  • org.owasp.esapi.waf.internal.Parameter
  • org.owasp.esapi.crypto.PlainText (implements java.io.Serializable)
  • org.owasp.esapi.reference.accesscontrol.policyloader.PolicyDTO
  • org.owasp.esapi.PreparedString
  • org.owasp.esapi.codecs.PushbackString
  • org.owasp.esapi.filters.RequestRateThrottleFilter (implements javax.servlet.Filter)
  • org.owasp.esapi.waf.rules.Rule
    • org.owasp.esapi.waf.rules.AddHeaderRule
    • org.owasp.esapi.waf.rules.AddHTTPOnlyFlagRule
    • org.owasp.esapi.waf.rules.AddSecureFlagRule
    • org.owasp.esapi.waf.rules.AuthenticatedRule
    • org.owasp.esapi.waf.rules.BeanShellRule
    • org.owasp.esapi.waf.rules.DetectOutboundContentRule
    • org.owasp.esapi.waf.rules.EnforceHTTPSRule
    • org.owasp.esapi.waf.rules.GeneralAttackSignatureRule
    • org.owasp.esapi.waf.rules.HTTPMethodRule
    • org.owasp.esapi.waf.rules.IPRule
    • org.owasp.esapi.waf.rules.MustMatchRule
    • org.owasp.esapi.waf.rules.PathExtensionRule
    • org.owasp.esapi.waf.rules.ReplaceContentRule
    • org.owasp.esapi.waf.rules.RestrictContentTypeRule
    • org.owasp.esapi.waf.rules.RestrictUserAgentRule
    • org.owasp.esapi.waf.rules.SimpleVirtualPatchRule
  • org.owasp.esapi.waf.rules.RuleUtil
  • org.owasp.esapi.SecurityConfiguration.Threshold
  • org.owasp.esapi.crypto.SecurityProviderLoader
  • org.owasp.esapi.filters.SecurityWrapper (implements javax.servlet.Filter)
  • javax.servlet.ServletRequestWrapper (implements javax.servlet.ServletRequest)
    • javax.servlet.http.HttpServletRequestWrapper (implements javax.servlet.http.HttpServletRequest)
      • org.owasp.esapi.waf.internal.InterceptingHTTPServletRequest
      • org.owasp.esapi.filters.SecurityWrapperRequest (implements javax.servlet.http.HttpServletRequest)
  • javax.servlet.ServletResponseWrapper (implements javax.servlet.ServletResponse)
    • javax.servlet.http.HttpServletResponseWrapper (implements javax.servlet.http.HttpServletResponse)
      • org.owasp.esapi.waf.internal.InterceptingHTTPServletResponse
      • org.owasp.esapi.filters.SecurityWrapperResponse (implements javax.servlet.http.HttpServletResponse)
  • org.owasp.esapi.StringUtilities
  • javax.servlet.jsp.tagext.TagSupport (implements javax.servlet.jsp.tagext.IterationTag, java.io.Serializable)
    • javax.servlet.jsp.tagext.BodyTagSupport (implements javax.servlet.jsp.tagext.BodyTag)
      • org.owasp.esapi.tags.BaseEncodeTag
        • org.owasp.esapi.tags.EncodeForBase64Tag
        • org.owasp.esapi.tags.EncodeForCSSTag
        • org.owasp.esapi.tags.EncodeForHTMLAttributeTag
        • org.owasp.esapi.tags.EncodeForHTMLTag
        • org.owasp.esapi.tags.EncodeForJavaScriptTag
        • org.owasp.esapi.tags.EncodeForURLTag
        • org.owasp.esapi.tags.EncodeForVBScriptTag
        • org.owasp.esapi.tags.EncodeForXMLAttributeTag
        • org.owasp.esapi.tags.EncodeForXMLTag
        • org.owasp.esapi.tags.EncodeForXPathTag
  • java.lang.Throwable (implements java.io.Serializable)
    • java.lang.Exception
      • org.owasp.esapi.errors.EnterpriseSecurityException
        • org.owasp.esapi.errors.AccessControlException
        • org.owasp.esapi.errors.AuthenticationException
          • org.owasp.esapi.errors.AuthenticationAccountsException
          • org.owasp.esapi.errors.AuthenticationCredentialsException
          • org.owasp.esapi.errors.AuthenticationHostException
          • org.owasp.esapi.errors.AuthenticationLoginException
        • org.owasp.esapi.errors.AvailabilityException
        • org.owasp.esapi.errors.CertificateException
        • org.owasp.esapi.waf.ConfigurationException
        • org.owasp.esapi.errors.EncodingException
        • org.owasp.esapi.errors.EncryptionException
        • org.owasp.esapi.errors.ExecutorException
        • org.owasp.esapi.errors.IntegrityException
        • org.owasp.esapi.errors.ValidationException
          • org.owasp.esapi.errors.ValidationAvailabilityException
          • org.owasp.esapi.errors.ValidationUploadException
      • java.lang.RuntimeException
        • org.owasp.esapi.errors.ConfigurationException
        • org.owasp.esapi.errors.EnterpriseSecurityRuntimeException
          • org.owasp.esapi.errors.EncryptionRuntimeException
          • org.owasp.esapi.errors.IntrusionException
  • org.owasp.esapi.codecs.Trie.TrieProxy<T> (implements org.owasp.esapi.codecs.Trie<T>)
    • org.owasp.esapi.codecs.Trie.Unmodifiable<T>
  • org.owasp.esapi.codecs.Trie.Util
  • org.owasp.esapi.ValidationErrorList
  • java.io.Writer (implements java.lang.Appendable, java.io.Closeable, java.io.Flushable)
    • java.io.PrintWriter
      • org.owasp.esapi.waf.internal.InterceptingPrintWriter

Interface Hierarchy

• org.owasp.esapi.AccessController
• org.owasp.esapi.AccessControlRule<P,R>
• org.owasp.esapi.reference.accesscontrol.policyloader.ACRParameterLoader<T>
• org.owasp.esapi.Authenticator
• org.owasp.esapi.Encoder
• org.owasp.esapi.EncryptedProperties
• org.owasp.esapi.Encryptor
• org.owasp.esapi.configuration.EsapiPropertyLoader
  • org.owasp.esapi.SecurityConfiguration
• org.owasp.esapi.Executor
• org.owasp.esapi.HTTPUtilities
• org.owasp.esapi.IntrusionDetector
• org.owasp.esapi.LogFactory
• org.owasp.esapi.Logger
• java.util.Map<K,V>
  • org.owasp.esapi.codecs.Trie<T>
• org.owasp.esapi.reference.accesscontrol.policyloader.PolicyParameters
• java.security.Principal
  • org.owasp.esapi.User (also extends java.io.Serializable)
• org.owasp.esapi.Randomizer
• java.io.Serializable
  • org.owasp.esapi.AccessReferenceMap<K>
  • org.owasp.esapi.User (also extends java.security.Principal)
• org.owasp.esapi.ValidationRule
• org.owasp.esapi.Validator

Enum Hierarchy

• java.lang.Object
  • java.lang.Enum<E> (implements java.lang.Comparable<T>, java.io.Serializable)
    • org.owasp.esapi.codecs.MySQLCodec.Mode
    • org.owasp.esapi.configuration.consts.EsapiConfigurationType
    • org.owasp.esapi.configuration.consts.EsapiConfiguration
    • org.owasp.esapi.crypto.KeyDerivationFunction.PRF_ALGORITHMS