|
1 | 1 | <!DOCTYPE HTML> |
2 | 2 | <html lang> |
3 | 3 | <head> |
4 | | -<!-- Generated by javadoc (25) on Sat Apr 11 12:46:47 UTC 2026 --> |
| 4 | +<!-- Generated by javadoc (25) on Sun Apr 12 07:11:32 UTC 2026 --> |
5 | 5 | <title>SecurityUtils (Javadoc)</title> |
6 | 6 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
7 | 7 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> |
8 | | -<meta name="dc.created" content="2026-04-11"> |
| 8 | +<meta name="dc.created" content="2026-04-12"> |
9 | 9 | <meta name="description" content="declaration: package: eu.righettod, class: SecurityUtils"> |
10 | 10 | <meta name="generator" content="javadoc/ClassWriter"> |
11 | 11 | <link rel="stylesheet" type="text/css" href="../../resource-files/jquery-ui.min.css"> |
@@ -406,6 +406,8 @@ <h2>Method Summary</h2> |
406 | 406 | The following information are removed: |
407 | 407 |
|
408 | 408 | Characters: Carriage Return (CR), Linefeed (LF) and Tabulation (TAB). |
| 409 | + Characters: Unicode LINE SEPARATOR and Unicode PARAGRAPH SEPARATOR. |
| 410 | + Characters: CSI sequences and bare ESC. |
409 | 411 | Leading and trailing spaces. |
410 | 412 | Any HTML tags. |
411 | 413 | <br> |
@@ -1335,13 +1337,15 @@ <h3>isGZIPCompressedDataSafe</h3> |
1335 | 1337 | <section class="detail" id="sanitizeLogMessage(java.lang.String,int)"> |
1336 | 1338 | <h3>sanitizeLogMessage</h3> |
1337 | 1339 | <div class="horizontal-scroll"> |
1338 | | -<div class="member-signature"><span class="modifiers">public static</span> <span class="return-type"><a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a></span> <span class="element-name"><a href="../../src-html/eu/righettod/SecurityUtils.html#line-1626">sanitizeLogMessage</a></span><wbr><span class="parameters">(<a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> message, |
| 1340 | +<div class="member-signature"><span class="modifiers">public static</span> <span class="return-type"><a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a></span> <span class="element-name"><a href="../../src-html/eu/righettod/SecurityUtils.html#line-1628">sanitizeLogMessage</a></span><wbr><span class="parameters">(<a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> message, |
1339 | 1341 | int maxMessageLength)</span></div> |
1340 | 1342 | <div class="block">Process a string, intended to be written in a log, to remove as much as possible information that can lead to an exposure to a log injection vulnerability.<br><br> |
1341 | 1343 | <b>Log injection</b> is also called <b>log forging</b>.<br><br> |
1342 | 1344 | The following information are removed: |
1343 | 1345 | <ul> |
1344 | 1346 | <li>Characters: Carriage Return (CR), Linefeed (LF) and Tabulation (TAB).</li> |
| 1347 | + <li>Characters: Unicode LINE SEPARATOR and Unicode PARAGRAPH SEPARATOR.</li> |
| 1348 | + <li>Characters: CSI sequences and bare ESC.</li> |
1345 | 1349 | <li>Leading and trailing spaces.</li> |
1346 | 1350 | <li>Any HTML tags.</li> |
1347 | 1351 | </ul><br> |
@@ -1374,7 +1378,7 @@ <h3>sanitizeLogMessage</h3> |
1374 | 1378 | <section class="detail" id="isXMLSVGImage(java.lang.String)"> |
1375 | 1379 | <h3>isXMLSVGImage</h3> |
1376 | 1380 | <div class="horizontal-scroll"> |
1377 | | -<div class="member-signature"><span class="modifiers">public static</span> <span class="return-type">boolean</span> <span class="element-name"><a href="../../src-html/eu/righettod/SecurityUtils.html#line-1673">isXMLSVGImage</a></span><wbr><span class="parameters">(<a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> xmlFilePath)</span> |
| 1381 | +<div class="member-signature"><span class="modifiers">public static</span> <span class="return-type">boolean</span> <span class="element-name"><a href="../../src-html/eu/righettod/SecurityUtils.html#line-1679">isXMLSVGImage</a></span><wbr><span class="parameters">(<a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html" title="class or interface in java.lang" class="external-link">String</a> xmlFilePath)</span> |
1378 | 1382 | throws <span class="exceptions"><a href="https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/Exception.html" title="class or interface in java.lang" class="external-link">Exception</a></span></div> |
1379 | 1383 | <div class="block">Identify if an XML is an SVG image.<br> |
1380 | 1384 | The goal of this method is to prevent to leverage SVG, as an vector, to achieve a XSS when XML format is accepted.<br> |
@@ -1419,7 +1423,7 @@ <h3>isXMLSVGImage</h3> |
1419 | 1423 | <!-- ========= END OF CLASS DATA ========= --> |
1420 | 1424 | <footer role="contentinfo"> |
1421 | 1425 | <hr> |
1422 | | -<p class="legal-copy"><small>Generated on 2026-04-11 - <a href="https://github.com/righettod/code-snippets-security-utils">GitHub repository</a></small></p> |
| 1426 | +<p class="legal-copy"><small>Generated on 2026-04-12 - <a href="https://github.com/righettod/code-snippets-security-utils">GitHub repository</a></small></p> |
1423 | 1427 | </footer> |
1424 | 1428 | </main> |
1425 | 1429 | </div> |
|
0 commit comments