org.alfresco.web.scripts
Class SlingshotRemoteClient

java.lang.Object
  org.springframework.extensions.webscripts.connector.AbstractClient
      org.springframework.extensions.webscripts.connector.RemoteClient
          org.alfresco.web.scripts.SlingshotRemoteClient

All Implemented Interfaces:

org.springframework.extensions.webscripts.connector.Client

public class SlingshotRemoteClient
extends org.springframework.extensions.webscripts.connector.RemoteClient

Override the Spring WebScripts impl of RemoteClient to provide additional security processing of HTML responses retrieved via content APIs. Prevents the execution of inline JavaScript proxy driven API calls via XHR requests and similar.

Nested Class Summary

Nested classes/interfaces inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

org.springframework.extensions.webscripts.connector.RemoteClient.NonBlockingHttpParams, org.springframework.extensions.webscripts.connector.RemoteClient.NonBlockingHttpParamsFactory

Field Summary

Fields inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

CHARSETEQUALS, DEFAULT_BUFFERSIZE, DEFAULT_CONNECT_TIMEOUT, DEFAULT_MAX_REDIRECTS, DEFAULT_READ_TIMEOUT, DEFAULT_REQUEST_CONTENT_TYPE, DEFAULT_TICKET_NAME, HEADER_CONTENT_LENGTH, HEADER_CONTENT_TYPE, HEADER_COOKIE, HEADER_SERVER, HEADER_SET_COOKIE, HEADER_TRANSFER_ENCODING, SC_MOVED_PERMANENTLY, SC_MOVED_TEMPORARILY, SC_REMOTE_CONN_NOHOST, SC_REMOTE_CONN_TIMEOUT, SC_SEE_OTHER, SC_TEMPORARY_REDIRECT, X_WWW_FORM_URLENCODED

Fields inherited from class org.springframework.extensions.webscripts.connector.AbstractClient

endpoint

Constructor Summary

SlingshotRemoteClient()

Method Summary

protected void

processContentType(java.net.URL url, javax.servlet.http.HttpServletResponse res, org.apache.commons.httpclient.Header contentType)

Methods inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

buildURL, call, call, call, call, call, call, call, createHttpClient, createProxyHost, getCookies, getRequestContentType, getRequestMethod, getTicket, getTicketName, processResponse, setAllowHttpProxy, setAllowHttpsProxy, setBufferSize, setConnectTimeout, setCookies, setDefaultContentType, setDefaultEncoding, setMaxRedirects, setReadTimeout, setRemoveRequestHeaders, setRemoveResponseHeaders, setRequestContentType, setRequestMethod, setRequestProperties, setTicket, setTicketName, setUsernamePassword

Methods inherited from class org.springframework.extensions.webscripts.connector.AbstractClient

getEndpoint, getURL, setEndpoint

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SlingshotRemoteClient

public SlingshotRemoteClient()

Method Detail

processContentType

protected void processContentType(java.net.URL url,
                                  javax.servlet.http.HttpServletResponse res,
                                  org.apache.commons.httpclient.Header contentType)

Overrides:

processContentType in class org.springframework.extensions.webscripts.connector.RemoteClient