t.easyfilter.2.0.1-RELEASE.source-code.easyFilter-failsafe.properties Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of easyfilter Show documentation

EasyFilter is a Jave Web content filtering request replacement component, Supports use properties or xml file custom filtering configuration profiles.

There is a newer version: 2.0.2-RELEASE

Show newest version

# EasyFilter
# @author easyproject.cn 
# @author [email protected]

#  The easyFilter-failsafe.properties is a default configuration for EasyFilter, if an easyFilter.properties is not configured.


######################### Request keyword filter #########################

# Whether to filter keyword from request parameters
# on: Filter keyword parameter on
# off: Filter keyword parameter off
# if not on or off, use off
keywordFilter=on

# if find keyword, use defaultReplace to replace
defaultReplace=

# keyword and replace list
# Format: keyword,replace##keyword2,replace2##...
keywordAndReplaceList= <,<  \#\#  >,>  

# User defined keyword filter item
# If item's keyword same to keywordAndReplaceList config, these priority
# Format: keyword=replace
# eg. bitch=love
# eg. \u6BD2\u54C1=*
fuck=f***


# exclude keyword filter parameterName list
# Format: regexParameterName##regexParameterName##...
# Supports regex expressions
excludeKeywordFilterParameters=password\#\#.*.password\#\#confirmPwd

# exculde keyword filter uri list, request.getRequestURI()
# Format: regexURI##regexURI2##...
# Supports regex expressions
# eg. excludeKeywordFilterURI=/test\.jsp##add\.action
excludeKeywordFilterURI=



######################### SQL inject keyword filter #########################

# Whether to filter SQL inject keyword parameters
# on: Filter SQL inject keyword parameter on
# off: Filter SQL inject keyword parameter off
# if not on or off, use off
sqlInjectFilter=off

# SQL inject keyword, when sqlInjectFilter is true, these words will replace to empty by request
# Format: word##word2##...
sqlInjectFilterList=and##exec##insert##select##delete##update##count##*##%##chr##mid##master##truncate##char##declare##;##or##-##+##,

# inlude sql inject filter parameterName list
# Format: regexParameterName##regexParameterName##...
# Supports regex expressions
# eg. includeSqlInjectFilterParameters=sysUser.name
includeSqlInjectFilterParameters=