Package sk.iway.iwcm.common
Class DocTools
java.lang.Object
sk.iway.iwcm.common.DocTools
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionstatic intcreateWebPage(GroupDetails group, Identity user, javax.servlet.http.HttpServletRequest request, String title) Deprecated.- use AdminTools.createWebPagestatic List<DocDetails>getEditableDocs(int group_id, Identity user, int maxSize) Pripravi zoznam editovatelnych stranok pre daneho pouzivatela, maxSize sa pouziva pre specialny pripad obmedzujuci vrateny zoznamstatic StringgetHtmlDiff(String htmlCodeNew, String htmlCodeOld) Performs HTML diffing on two HTML strings.static intgetRequestNameDocId(String name, javax.servlet.http.HttpServletRequest request) Vrati docId stranky pre request hodnotu doc_data, doc_menu, doc_header atdstatic StringgetXssStrictUrlRedirect(javax.servlet.http.HttpServletRequest request, String path, String qs) Strict XSS filter, pouziva sa na KOMPLET VSETKY GET poziadavky (ak je zapnuty), volane z PathFilterstatic booleanisUrlAllowed(String path, String constantName, boolean appendSystemValue) Otestuje, ci zadana cesta je v zozname ciest definovanych v zadanej konstante.static booleanisXssStrictUrlException(String path, String constantName) Otestuje, ci zadana cesta je nastavena ako vynimka pre Strict XSS filterstatic StringremoveChars(String ret) vyhodi nepovolene znaky z nazvu suboru (zrusi aj znak /) POZOR: DA to na LOWER CASE!!!static StringremoveChars(String ret, boolean lowerCase) Vyhodi nepovolene znaky z nazvu suborustatic StringremoveCharsDir(String ret) Vyhodi nepovolene znaky z nazvu adresara (ponecha znak /) POZOR: neda to na LOWER CASE!!!static StringremoveCharsDir(String ret, boolean removeSpojky) static booleanOtestuje, ci zadana hodnota obsahuje znaky XSSstatic booleantestXssStrictGet(String value) Striktny test na XSS hodnotu, pouziva sa len v pripade GET poziadaviekstatic StringBuilderupdateCodes(Identity user, StringBuilder text, int currentDocId, javax.servlet.http.HttpServletRequest request, javax.servlet.ServletContext servletContext) aktualizuje kody v textestatic StringBuilderupdateUserCodes(Identity user, StringBuilder text) Aktualizuje kody pouzivatela !LOGGED_USER_XXX! v texte
-
Constructor Details
-
DocTools
protected DocTools()
-
-
Method Details
-
isXssStrictUrlException
Otestuje, ci zadana cesta je nastavena ako vynimka pre Strict XSS filter- Parameters:
path- - URL adresaconstantName- - meno konstanty, bud xssProtectionStrictGetUrlException, alebo xssProtectionStrictPostUrlException- Returns:
-
isUrlAllowed
Otestuje, ci zadana cesta je v zozname ciest definovanych v zadanej konstante. Konstanta je definovana ako ciarkou oddeleny zoznam URL adries, ak URL zacina na % pouzije sa substring, ak konci na ! pouzije sa equal, ak URL zacina na % a konci na ! pouzije sa endsWith, inak sa pouzije startsWith- Parameters:
path- - URL adresaconstantName- - meno konstanty so zoznamom povolenych URL adriesappendSystemValue- - ak je nastavene na true, tak sa hlada v constantName aj v constantNameSystem (zoznam povoleni sa spoji)- Returns:
-
removeChars
vyhodi nepovolene znaky z nazvu suboru (zrusi aj znak /) POZOR: DA to na LOWER CASE!!!- Parameters:
ret- Description of the Parameter- Returns:
- Description of the Return Value
-
removeChars
Vyhodi nepovolene znaky z nazvu suboru- Parameters:
ret-lowerCase- - ak je nastavene na true, zmeni aj velkost na male pismena- Returns:
-
testXss
Otestuje, ci zadana hodnota obsahuje znaky XSS- Parameters:
value-- Returns:
-
removeCharsDir
Vyhodi nepovolene znaky z nazvu adresara (ponecha znak /) POZOR: neda to na LOWER CASE!!!- Parameters:
ret- Description of the Parameter- Returns:
-
removeCharsDir
-
getRequestNameDocId
Vrati docId stranky pre request hodnotu doc_data, doc_menu, doc_header atd- Parameters:
name-request-- Returns:
-
updateCodes
public static StringBuilder updateCodes(Identity user, StringBuilder text, int currentDocId, javax.servlet.http.HttpServletRequest request, javax.servlet.ServletContext servletContext) aktualizuje kody v texte- Parameters:
user-text-currentDocId-request-servletContext-- Returns:
-
updateUserCodes
Aktualizuje kody pouzivatela !LOGGED_USER_XXX! v texte- Parameters:
user- Description of the Parametertext- Description of the Parameter- Returns:
- Description of the Return Value
-
getXssStrictUrlRedirect
public static String getXssStrictUrlRedirect(javax.servlet.http.HttpServletRequest request, String path, String qs) Strict XSS filter, pouziva sa na KOMPLET VSETKY GET poziadavky (ak je zapnuty), volane z PathFilter- Parameters:
request-path-qs-- Returns:
-
testXssStrictGet
Striktny test na XSS hodnotu, pouziva sa len v pripade GET poziadaviek- Parameters:
value-- Returns:
-
createWebPage
@Deprecated public static int createWebPage(GroupDetails group, Identity user, javax.servlet.http.HttpServletRequest request, String title) Deprecated.- use AdminTools.createWebPage -
getEditableDocs
Pripravi zoznam editovatelnych stranok pre daneho pouzivatela, maxSize sa pouziva pre specialny pripad obmedzujuci vrateny zoznam- Parameters:
group_id-user-maxSize-- Returns:
-
getHtmlDiff
Performs HTML diffing on two HTML strings. Notice that the input strings are "cleaned-up" first (e.g. all html tags are converted to lowercase).- Parameters:
htmlCodeNew- - current HTML codehtmlCodeOld- - old HTML code to compare with- Returns:
- the result
- Throws:
Exception- - something went wrong.
-