org.liveSense.service.xssRemove.XSSRemoveImpl.class Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of org.liveSense.service.xssRemove Show documentation
Show all versions of org.liveSense.service.xssRemove Show documentation
liveSense XSS Vulnerability Remove service and observer
The newest version!
???? 2G -org/liveSense/service/xssRemove/XSSRemoveImpl java/lang/Object )org/liveSense/service/xssRemove/XSSRemove XSSRemoveImpl.java ,Lorg/apache/felix/scr/annotations/Component; metatype immediate -Lorg/apache/felix/scr/annotations/Properties; value +Lorg/apache/felix/scr/annotations/Property; label %contentPathes.name description %contentPathes.description name
contentPathes %supportedMimeTypes.name %supportedMimeTypes.description supportedMimeTypes %elementRemovalList.name %elementRemovalList.description elementRemovalList %attributeNameRemovalList.name %%attributeNameRemovalList.description attributeNameRemovalList %attributeNameStartList.name #%attributeNameStartList.description attributeNameStartList !%attributeTypeValueStartList.name attributeTypeValueStartList %attributeSrcHrefList.name !%attributeSrcHrefList.description attributeSrcHrefList %elementReplacementList.name #%elementReplacementList.description elementReplacementList %styleContentList.name %styleContentList.description styleContentList log Lorg/slf4j/Logger; observationManager *Ljavax/jcr/observation/ObservationManager;
repository *Lorg/apache/sling/jcr/api/SlingRepository; ,Lorg/apache/felix/scr/annotations/Reference; configurator !Lorg/liveSense/core/Configurator; PARAM_CONTENT_PATHES Ljava/lang/String; DEFAULT_CONTENT_PATHES [Ljava/lang/String; PARAM_SUPPORTED_MIME_TYPES DEFAULT_SUPPORTED_MIME_TYPES PARAM_ELEMENT_REMOVAL_LIST DEFAULT_ELEMENT_REMOVAL_LIST !PARAM_ATTRIBUTE_NAME_REMOVAL_LIST #DEFAULT_ATTRIBUTE_NAME_REMOVAL_LIST PARAM_ATTRIBUTE_NAME_START_LIST !DEFAULT_ATTRIBUTE_NAME_START_LIST %PARAM_ATTRIBUTE_TYPE_VALUE_START_LIST " 'DEFAULT_ATTRIBUTE_TYPE_VALUE_START_LIST PARAM_ATTRIBUTE_SRC_HREF_LIST % DEFAULT_ATTRIBUTE_SRC_HREF_LIST PARAM_ELEMENT_REPLACEMENT_LIST ( DEFAULT_ELEMENT_REPLACEMENT_LIST PARAM_STYLE_CONTENT_LIST + DEFAULT_STYLE_CONTENT_LIST session Ljavax/jcr/Session; eventListeners Ljava/util/ArrayList; OLjava/util/ArrayList; parser +Lorg/liveSense/service/xssRemove/XSSParser; ()V Y Z
[ 8 9 ] 9 _ < 9 a 9 c ? 9 e 9 g B 9 i 9 k E 9 m 9 o H 9 q " 9 s K 9 u % 9 w N 9 y ( 9 { Q 9 } + 9 java/util/ArrayList ?
? [ T U ? this /Lorg/liveSense/service/xssRemove/XSSRemoveImpl; activate 0(Lorg/osgi/service/component/ComponentContext;)V javax/jcr/RepositoryException ? %org/xml/sax/SAXNotRecognizedException ? $org/xml/sax/SAXNotSupportedException ? +org/osgi/service/component/ComponentContext ?
getProperties ()Ljava/util/Dictionary; ? ? ? ? java/util/Dictionary ? get &(Ljava/lang/Object;)Ljava/lang/Object; ? ?
? ? &org/apache/sling/commons/osgi/OsgiUtil ?
toStringArray :(Ljava/lang/Object;[Ljava/lang/String;)[Ljava/lang/String; ? ?
? ? 9 java/lang/String ? equals (Ljava/lang/Object;)Z ? ?
? ? java/lang/StringBuffer ?
? [ , ? append ,(Ljava/lang/String;)Ljava/lang/StringBuffer; ? ?
? ? toString ()Ljava/lang/String; ? ?
? ? , - ? (Setting new contentPathes: {}) (was: {}) ?
? ? org/slf4j/Logger ? info 9(Ljava/lang/String;Ljava/lang/Object;Ljava/lang/Object;)V ? ? ? ? -Setting new elementRemovalList: {}) (was: {}) ? 3Setting new attributeNameRemovalList: {}) (was: {}) ? 1Setting new attributeNameStartList: {}) (was: {}) ? 6Setting new attributeTypeValueStartList: {}) (was: {}) ? /Setting new attributeSrcHrefList: {}) (was: {}) ? 1Setting new elementReplacementList: {}) (was: {}) ? +Setting new styleContentList: {}) (was: {}) ? )org/liveSense/service/xssRemove/XSSParser ? ?([Ljava/lang/String;[Ljava/lang/String;[Ljava/lang/String;[Ljava/lang/String;[Ljava/lang/String;[Ljava/lang/String;[Ljava/lang/String;)V Y ?
? ? W X ? Parser init error: ? error *(Ljava/lang/String;Ljava/lang/Throwable;)V ? ? ? ? 0 1 ? (org/apache/sling/jcr/api/SlingRepository ? loginAdministrative '(Ljava/lang/String;)Ljavax/jcr/Session; ? ? ? ? R S ? option.observation.supported ?
getDescriptor &(Ljava/lang/String;)Ljava/lang/String; ? ? ? ? true ? javax/jcr/Session ? getWorkspace ()Ljavax/jcr/Workspace; ? ? ? ? javax/jcr/Workspace ? getObservationManager ,()Ljavax/jcr/observation/ObservationManager; ? ? ? ? . / ? nt:resource ? 6org/liveSense/service/xssRemove/XSSRemoveEventListener ? .(Lorg/liveSense/service/xssRemove/XSSRemove;)V Y
? (javax/jcr/observation/ObservationManager addEventListener c(Ljavax/jcr/observation/EventListener;ILjava/lang/String;Z[Ljava/lang/String;[Ljava/lang/String;Z)V add ?
?
nt:file i I contentPathesValueList Ljava/lang/StringBuffer; contentPathesNewValueList elementRemovalListValueList elementRemovalListNewValueList !attributeNameRemovalListValueList $attributeNameRemovalListNewValueList attributeNameStartListValueList "attributeNameStartListNewValueList $attributeTypeValueStartListValueList 'attributeTypeValueStartListNewValueList attributeSrcHrefListValueList attributeSrcHrefListNewValueList elementReplacementListValueList "elementReplacementListNewValueList styleContentListValueList styleContentListNewValueList ex 'Lorg/xml/sax/SAXNotRecognizedException; &Lorg/xml/sax/SAXNotSupportedException; propType listener 8Lorg/liveSense/service/xssRemove/XSSRemoveEventListener; fileType componentContext -Lorg/osgi/service/component/ComponentContext; props Ljava/util/Dictionary<**>; Ljava/util/Dictionary; contentPathesNew contentPathesChanged Z elementRemovalListNew elementRemovalListChanged attributeNameRemovalListNew attributeNameRemovalListChanged attributeNameStartListNew attributeNameStartListChanged attributeTypeValueStartListNew "attributeTypeValueStartListChanged attributeSrcHrefListNew attributeSrcHrefListChanged elementReplacementListNew elementReplacementListChanged styleContentListNew styleContentListChanged
deactivate iterator ()Ljava/util/Iterator; ?@
?A java/util/IteratorC hasNext ()Z EF DG next ()Ljava/lang/Object; IJ DK removeEventListener ((Ljavax/jcr/observation/EventListener;)V MN O isLive QF ?R logout T Z ?U i$ Ljava/util/Iterator; isValidMimeType (Ljavax/jcr/Node;)Z jcr:content[ javax/jcr/Node] getNode $(Ljava/lang/String;)Ljavax/jcr/Node; _` ^a jcr:mimeTypec hasProperty (Ljava/lang/String;)Z ef ^g getProperty ((Ljava/lang/String;)Ljavax/jcr/Property; ij ^k javax/jcr/Propertym getString o ? np actMimeType mimeType node Ljavax/jcr/Node; removeXSSsecurityVulnerability '(Ljava/lang/String;Ljava/lang/String;)V java/lang/Exceptionx getRootNode ()Ljavax/jcr/Node; z{ ?| java/lang/StringBuilder~
[ -(Ljava/lang/String;)Ljava/lang/StringBuilder; ??
? /?
? YZ
? ,Removing XSS Vulnerability codes for node {}? getPath ? ? ^? '(Ljava/lang/String;Ljava/lang/Object;)V ?? ?? java/io/StringWriter?
? [ org/ccil/cowan/tagsoup/XMLWriter? (Ljava/io/Writer;)V Y?
?? omit-xml-declaration? yes? setOutputProperty ?w
?? encoding? 3 4 ? org/liveSense/core/Configurator? getEncoding ? ? ?? setContentHandler (Lorg/xml/sax/ContentHandler;)V ??
?? org/xml/sax/InputSource? java/io/InputStreamReader? jcr:data? getStream ()Ljava/io/InputStream; ?? n? *(Ljava/io/InputStream;Ljava/lang/String;)V Y?
?? (Ljava/io/Reader;)V Y?
?? parse (Lorg/xml/sax/InputSource;)V ??
?? java/io/ByteArrayInputStream?
? ? getBytes (Ljava/lang/String;)[B ??
?? ([B)V Y?
?? setProperty =(Ljava/lang/String;Ljava/io/InputStream;)Ljavax/jcr/Property; ?? ^? 1No XSS Vulnerability remove, not a HTML: {} - {}? save ? Z ?? sw Ljava/io/StringWriter; xmlWriter "Lorg/ccil/cowan/tagsoup/XMLWriter; parentFolder fileName org/slf4j/LoggerFactory? getLogger %(Ljava/lang/Class;)Lorg/slf4j/Logger; ??
?? /sites? /users? text/html? script? applet? embed? xml? bgsound? meta? link? style? base? onload? onclick? onchange? onsubmit? onmouseover onerror dynsrc datasrc datafld dataformatas on
text/javascript javascript: -^\s*j\s*a\s*v\s*a\s*s\s*c\s*r\s*i\s*p\s*t\s*: .^\s*v\s*i\s*e\s*w\s*-s\s*o\s*u\s*r\s*c\s*e\s*: ^\s*d\s*a\s*t\s*a\s*: %^\s*v\s*b\s*s\s*s\s*r\s*i\s*p\s*t\s*: ^\s*a\s*b\s*o\s*u\s*t\s*: ^\s*s\s*h\s*e\s*e\s*l\s*: html/div head/div! body/div#
iframe/div% frame/div' frameset/div) layer/div+
ilayer/div-
blink/span/
object/div1
javascript3
expression5 bindRepository -(Lorg/apache/sling/jcr/api/SlingRepository;)V unbindRepository bindConfigurator $(Lorg/liveSense/core/Configurator;)V unbindConfigurator RuntimeInvisibleAnnotations
ConstantValue Signature Code LocalVariableTable LineNumberTable LocalVariableTypeTable
StackMapTable
Exceptions
SourceFile ! " , - . / 0 1 = 2 3 4 = 2 5 6 > 7 8 9 9 : 6 > ; < 9 9 = 6 > > ? 9 9 @ 6 > A B 9 9 C 6 > D E 9 9 F 6 > G H 9 " 9 I 6 > J K 9 % 9 L 6 > M N 9 ( 9 O 6 > P Q 9 + 9 R S T U ? V W X
Y Z @ ? O*? \*? ^? `*? b? d*? f? h*? j? l*? n? p*? r? t*? v? x*? z? |*? ~? ?*? ?Y? ?? ?? A O ? ? B . F T X \ ` d ' h . s 5 w < { C ? ? ? @ +
?+? ? M+? ? 7? ?? ^? ?N6-?*? `?? 6? ?6-?? -2*? `2? ?? 6????? ?? ?Y? ?:? ?Y? ?:6-?? #? ?? ?W-2? ?? ?W????6*? `?? &? ?? ?W*? `2? ?? ?W???ֲ ??? ?? ?? ? *-? `+? ? >? ?? f? ?:6?*? h?? 6? ?6?? 2*? h2? ?? 6????? ?? ?Y? ?:? ?Y? ?:6 ?? $ ? ?? ?W 2? ?? ?W? ???6 *? h?? & ? ?? ?W*? h 2? ?? ?W? ??ֲ ??? ?? ?? ? *? h+? ? A? ?? j? ?:6?*? l?? 6? ?6 ?? 2*? l 2? ?? 6? ???? ?? ?Y? ?: ? ?Y? ?:
6 ?? $ ?
?? ?W
2? ?? ?W? ???6 *? l?? & ? ?? ?W *? l 2? ?? ?W? ??ֲ ??
? ? ? ?? ? *? l+? ? D? ?? n? ?: 6
?*? p?? 6
? ?6 ?? 2*? p 2? ?? 6
? ???
? ?? ?Y? ?: ? ?Y? ?: 6
?? $
? ?? ?W
2? ?? ?W?
???6
*? p?? &
? ?? ?W *? p
2? ?? ?W?
??ֲ ?? ? ? ? ?? ? * ? p+? ? G? ?? r? ?: 6 ?*? t?? 6 ? ?6
??
2*? t
2? ?? 6 ?
??? ? ?? ?Y? ?:
? ?Y? ?:6 ?? $? ?? ?W 2? ?? ?W????6*? t?? &?
?? ?W
*? t2? ?? ?W???ֲ ??? ?
? ?? ? * ? t+? ? J? ?? v? ?:
6
?*? x?? 6? ?6
??
2*? x2? ?? 6????? ?? ?Y? ?:? ?Y? ?:6
?? $? ?? ?W
2? ?? ?W????6*? x?? &? ?? ?W*? x2? ?? ?W???ֲ ??? ?? ?? ? *
? x+? ? M? ?? z? ?:6?*? |?? 6? ?6?? 2*? |2? ?? 6????? ?? ?Y? ?:? ?Y? ?:6?? $? ?? ?W2? ?? ?W????6*? |?? &? ?? ?W*? |2? ?? ?W???ֲ ??? ?? ?? ? *? |+? ? P? ?? ~? ?:6?*? ??? 6? ?6?? 2*? ?2? ?? 6????? ?? ?Y? ?:? ?Y? ?:6?? $? ?? ?W2? ?? ?W????6*? ??? &? ?? ?W*? ?2? ?? ?W???ֲ ??? ?? ?? ? *? ?*? ?Y*? h*? l*? p*? t*? x*? |*? ?? ӵ է ":? ??? ? ? :? ??? ? **? ?? ? ? ?*? ?? ? ?? ?? ?**? ? ? ? ? ? ?6*? `?? y? ?Y?S:? ?Y*?:*? ? *? `2? *? ?? W? ?Y
S:? ?Y*?:*? ?*? `2? *? ?? W????? ??? ??? ? A ? A / ! j ' ? - ^ | g s # A ) m - 5 > v ? # ) G - v
? # ? )
! -
? ? v ? #
? ) ? - ?
? v l # ? ) ? - ? ? v F # ? ) ? - w ? v # ] ) ? - Q Z v ? !"
!# d e$ 9 n [%& ? ,' 9 O ? ? ? ? ?() ?*, ?- 9 ?./ ??0 9 ??1/ ? 2 9 ?3/ ?/4 9 ?,5/
{U6 9 ~R7/ U{8 9
Xx9/ /?: 9 2?;/ ?< 9 ?=/ C ?*+ B : ? ? ? ? ? & ? , ? 6 ? G ? J ? P ? U ? ^ ? g ? q ? v ? ~ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?! ?' ?, ?5 ?> ?I ?N ?V ?d ?j ?w ?| ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ? ? ? ? ?# ?( ?0 ?> ?D ?Q ?V ?^ ?n ?t ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?
+0 8 HN
bh{~?????? ? ? ?"?#?$?&?"?)*
+-")(/<0B6U7X8c9i;t<?=?;?@?A?B?D?E?F?H?D?K?L?M?O?KQR X/Y2Z=[C]N^`_c]ibncwd?f?g?h?j?f?m?n?o?q?m?s?t?{ | }~ ?(?:?=?C?H?Q?Z?e?j?r?????????????????????????? ?
??'?:?L?Y?d?n???????????????D U ]? , ? ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? ? & ?? ? ? ? ?? ? ? ? i ?P ?
? 5? E ? > ? @ ? L*? ?? +*? ??BM,?H ? ,?L ? ?N*? ?-?P ???*? ?? *? ?S ? *? ?V ? A * "
%& WX L ? ? L() B ? ? "? ,? /? B? K?D ? D? E ? YZ @ ? V+\?b d?h ? A+\?b d?l ?q M> *? d?? *? d 2:,? ?? ????? ?? A 4 > r 6 - " + $s 6 V ? ? Vtu B *
? ? +? 6? >? G? I? O? R? T?D ? - ?? E ? vw @ ? *? ?S ? **? ?? ? ? ?*? ?} ?Y??+?????,?????b N*-??? ?? ??-?? ?? ??Y??:??Y??:?????*???? ??*? ???*? ջ?Y??Y-\?b ??l ?? *???? ??????-\?b ???Y??*???? ?Ƿʹ? W? %? ??-?? -\?b d?l ? ? *? ?? ? A > c ??? n ??? ? ? ? 6 ? 6 A ?tu B > ? ? A? I? Z? c? n? y? ?? ?? ?? ?? ??? ?D
? ?^!E ?y ? Z @ ? Z?? ?? ?Y?SY?S? ^? ?Y?S? b ? ?Y?SY?SY?SY?SY?SY?SY?SY?SY?S? f
? ?Y?SY?SY?SY SYSYSYSYSY
SY S? j? ?YS? n? ?YS? r? ?YSYSYSYSYSY SY S? v
? ?Y SY"SY$SY&SY(SY*SY,SY.SY0SY 2S? z? ?Y4SY6S? ~? B *
H S W ( [ i _ ? c ? g ? k ? vF z 78 @ *+? ݱ 98 @ *? ?+? *? ݱ :; @ *+??? <; @ *??+? *??? F = ? Z
Z
[ @ s s s @ s s s @ s s s @ s s s @ s s s @ s ! s s "@ s # s $ s %@ s & s ' s (@ s ) s * s +