Last active
February 18, 2021 15:22
-
-
Save techforum-repo/098c0ec3f97ca53a1fb878e66446c1ef to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package antisamy; | |
| import java.io.IOException; | |
| import java.io.InputStream; | |
| import java.io.PrintWriter; | |
| import javax.servlet.ServletException; | |
| import javax.servlet.annotation.WebServlet; | |
| import javax.servlet.http.HttpServlet; | |
| import javax.servlet.http.HttpServletRequest; | |
| import javax.servlet.http.HttpServletResponse; | |
| import org.owasp.validator.html.AntiSamy; | |
| import org.owasp.validator.html.CleanResults; | |
| import org.owasp.validator.html.Policy; | |
| import org.owasp.validator.html.PolicyException; | |
| import org.owasp.validator.html.ScanException; | |
| /** | |
| * Servlet implementation class AntiSamyDemoServlet | |
| */ | |
| @WebServlet("/AntiSamyDemoServlet") | |
| public class AntiSamyDemoServlet extends HttpServlet { | |
| private static final long serialVersionUID = 1L; | |
| /** | |
| * @see HttpServlet#HttpServlet() | |
| */ | |
| public AntiSamyDemoServlet() { | |
| super(); | |
| } | |
| Policy getPolicy() { | |
| try { | |
| InputStream is = this.getServletContext() | |
| .getResourceAsStream("/WEB-INF/classes/antisamy/antisamy-slashdot.xml"); | |
| System.out.println("is " + is); | |
| return Policy.getInstance(is); | |
| } catch (PolicyException e) { | |
| // TODO Auto-generated catch block | |
| e.printStackTrace(); | |
| } | |
| return null; | |
| } | |
| /** | |
| * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse | |
| * response) | |
| */ | |
| protected void doGet(HttpServletRequest request, HttpServletResponse response) | |
| throws ServletException, IOException { | |
| response.setContentType("text/html"); | |
| PrintWriter out = response.getWriter(); | |
| try { | |
| out.println("<html><head><title>Hello</title></head><body> <br/> <br/>"); | |
| String link = "<a test=\"test\" href=\"http://www.test.com/test.html\">Link</a>"; | |
| CleanResults cr = new AntiSamy().scan(link, getPolicy()); | |
| out.println(cr.getCleanHTML()); | |
| out.println("</body></html>"); | |
| } catch (ScanException e) { | |
| // TODO Auto-generated catch block | |
| e.printStackTrace(); | |
| } catch (PolicyException e) { | |
| // TODO Auto-generated catch block | |
| e.printStackTrace(); | |
| } | |
| } | |
| /** | |
| * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse | |
| * response) | |
| */ | |
| protected void doPost(HttpServletRequest request, HttpServletResponse response) | |
| throws ServletException, IOException { | |
| // TODO Auto-generated method stub | |
| doGet(request, response); | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment