RequestUtil (Apache Tomcat 10.1.33 API Documentation)

java.lang.Object

org.apache.tomcat.util.http.RequestUtil

public class RequestUtil extends Object

Method Summary

Modifier and Type

Method

Description

static boolean

isSameOrigin(HttpServletRequest request, String origin)

static boolean

isValidOrigin(String origin)

Checks if a given origin is valid or not.

static String

normalize(String path)

Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it.

static String

normalize(String path, boolean replaceBackSlash)

Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details
- normalize
  
  public static String normalize(String path)
  
  Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it. WARNING - This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input.
  
  Parameters:
  
  path - Relative path to be normalized
  
  Returns:
  
  The normalized path or null if the path cannot be normalized
- normalize
  
  public static String normalize(String path, boolean replaceBackSlash)
  
  Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it. WARNING - This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input.
  
  Parameters:
  
  path - Relative path to be normalized
  
  replaceBackSlash - Should '\\' be replaced with '/'
  
  Returns:
  
  The normalized path or null if the path cannot be normalized
- isSameOrigin
  
  public static boolean isSameOrigin(HttpServletRequest request, String origin)
- isValidOrigin
  public static boolean isValidOrigin(String origin)
  
  Checks if a given origin is valid or not. Criteria:
  
  If an encoded character is present in origin, it's not valid.
  
  If origin is "null", it's valid.
  
  Origin should be a valid URI
  
  Parameters:
  
  origin - The origin URI
  
  Returns:
  
  true if the origin was valid
  
  See Also:
  
  RFC952