Class RequestUtil
java.lang.Object
org.apache.tomcat.util.http.RequestUtil
- 
Method SummaryModifier and TypeMethodDescriptionstatic booleanisSameOrigin(HttpServletRequest request, String origin) static booleanisValidOrigin(String origin) Checks if a given origin is valid or not.static StringNormalize a relative URI path.static StringNormalize a relative URI path.
- 
Method Details- 
normalizeNormalize a relative URI path. This method normalizes "/./", "/../", "//" and "\". If the input path is an attempt to 'escape the root' (e.g. /../input.txt) thennullis returned to prevent attempts to 'escape the root'. WARNING - No other URI validation checks are performed.- Parameters:
- path- Relative path to be normalized
- Returns:
- The normalized path or nullif the input path attempts to 'escape the root'.
 
- 
normalizeNormalize a relative URI path. This method normalizes "/./", "/../" and "//". This method optionally normalizes "\". If the input path is an attempt to 'escape the root' (e.g. /../input.txt) thennullis returned to prevent attempts to 'escape the root'. WARNING - No other URI validation checks are performed.- Parameters:
- path- Relative path to be normalized
- replaceBackSlash- Should '\\' be normalized to '/'
- Returns:
- The normalized path or nullif the input path attempts to 'escape the root'.
 
- 
isSameOrigin
- 
isValidOriginChecks if a given origin is valid or not. Criteria:- If an encoded character is present in origin, it's not valid.
- If origin is "null", it's valid.
- Origin should be a valid URI
 - Parameters:
- origin- The origin URI
- Returns:
- trueif the origin was valid
- See Also:
 
 
-