Class XSSFilterTest


  • @UnitTest
    public class XSSFilterTest
    extends java.lang.Object
    • Constructor Detail

      • XSSFilterTest

        public XSSFilterTest()
    • Method Detail

      • testSetup

        public void testSetup()
                       throws java.lang.Exception
        Throws:
        java.lang.Exception
      • createSampleHeaders

        protected java.util.Map<java.lang.String,​java.lang.String> createSampleHeaders()
      • createDefaultRulePatternDefinitions

        protected java.util.Map<java.lang.String,​java.lang.String> createDefaultRulePatternDefinitions()
      • createOrderedRulePatternDefinitions

        protected java.util.Map<java.lang.String,​java.lang.String> createOrderedRulePatternDefinitions()
      • testLegalParamsForStrippingFilter

        public void testLegalParamsForStrippingFilter()
                                               throws java.io.IOException,
                                                      javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testStrippingFilterOrdered

        public void testStrippingFilterOrdered()
                                        throws java.io.IOException,
                                               javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testLegalParamsForRejectingFilter

        public void testLegalParamsForRejectingFilter()
                                               throws java.io.IOException,
                                                      javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testLegalParams

        protected void testLegalParams​(XSSFilter filter)
                                throws java.io.IOException,
                                       javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testIllegalParamsForStrippingFilter

        public void testIllegalParamsForStrippingFilter()
                                                 throws java.io.IOException,
                                                        javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testIllegalParamsForRejectingFilter

        public void testIllegalParamsForRejectingFilter()
                                                 throws java.io.IOException,
                                                        javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testLegalHeadersForStrippingFilter

        public void testLegalHeadersForStrippingFilter()
                                                throws java.io.IOException,
                                                       javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testLegalHeadersForRejectingFilter

        public void testLegalHeadersForRejectingFilter()
                                                throws java.io.IOException,
                                                       javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testIllegalHeadersForStripingFilter

        public void testIllegalHeadersForStripingFilter()
                                                 throws java.io.IOException,
                                                        javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testIllegalHeadersForStripingFilter

        protected void testIllegalHeadersForStripingFilter​(XSSFilter strippingFilter)
                                                    throws java.io.IOException,
                                                           javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testIllegalHeadersForRejectingFilter

        public void testIllegalHeadersForRejectingFilter()
                                                  throws java.io.IOException,
                                                         javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testCachingForStrippingFilter

        public void testCachingForStrippingFilter()
                                           throws java.io.IOException,
                                                  javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testCachingForrejectingFilter

        public void testCachingForrejectingFilter()
                                           throws java.io.IOException,
                                                  javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testHeadersInjectedProperly

        public void testHeadersInjectedProperly()
                                         throws java.io.IOException,
                                                javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • testHeadersInjectedProperlyAndPatternsStripped

        public void testHeadersInjectedProperlyAndPatternsStripped()
                                                            throws java.io.IOException,
                                                                   javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldAllowHostIfHeaderWhiteListIsNull

        public void shouldAllowHostIfHeaderWhiteListIsNull()
                                                    throws java.io.IOException,
                                                           javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldAllowHostIfHeaderWhiteListIsEmpty

        public void shouldAllowHostIfHeaderWhiteListIsEmpty()
                                                     throws java.io.IOException,
                                                            javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldAllowHostIfHeaderWhiteListMatches

        public void shouldAllowHostIfHeaderWhiteListMatches()
                                                     throws java.io.IOException,
                                                            javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldRejectHostIfHeaderWhiteListDoesNotMatch

        public void shouldRejectHostIfHeaderWhiteListDoesNotMatch()
                                                           throws java.io.IOException,
                                                                  javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldAcceptHostIfHeaderWhiteListMatchesOneOfMany

        public void shouldAcceptHostIfHeaderWhiteListMatchesOneOfMany()
                                                               throws java.io.IOException,
                                                                      javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldRejectHostIfHeaderMatchesNoEntry

        public void shouldRejectHostIfHeaderMatchesNoEntry()
                                                    throws java.io.IOException,
                                                           javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException
      • shouldAcceptRegexpAsWhiteListRule

        public void shouldAcceptRegexpAsWhiteListRule()
                                               throws java.io.IOException,
                                                      javax.servlet.ServletException
        Throws:
        java.io.IOException
        javax.servlet.ServletException