org.alfresco.web.scripts

Class SlingshotRemoteClient

java.lang.Object

org.springframework.extensions.webscripts.connector.AbstractClient

org.springframework.extensions.webscripts.connector.RemoteClient

org.alfresco.web.scripts.SlingshotRemoteClient

All Implemented Interfaces:

Cloneable, org.springframework.extensions.webscripts.connector.Client

public class SlingshotRemoteClient
extends org.springframework.extensions.webscripts.connector.RemoteClient

Override the Spring WebScripts impl of RemoteClient to provide additional security processing of HTML responses retrieved via content APIs. Prevents the execution of inline JavaScript proxy driven API calls via XHR requests and similar.

Author:

Kevin Roast

Nested Class Summary

Nested classes/interfaces inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

org.springframework.extensions.webscripts.connector.RemoteClient.NonBlockingHttpParams, org.springframework.extensions.webscripts.connector.RemoteClient.NonBlockingHttpParamsFactory

Field Summary

Fields inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

CHARSETEQUALS, DEFAULT_BUFFERSIZE, DEFAULT_CONNECT_TIMEOUT, DEFAULT_MAX_REDIRECTS, DEFAULT_READ_TIMEOUT, DEFAULT_REQUEST_CONTENT_TYPE, DEFAULT_TICKET_NAME, HEADER_CONTENT_LENGTH, HEADER_CONTENT_TYPE, HEADER_COOKIE, HEADER_SERVER, HEADER_SET_COOKIE, HEADER_TRANSFER_ENCODING, SC_MOVED_PERMANENTLY, SC_MOVED_TEMPORARILY, SC_SEE_OTHER, SC_TEMPORARY_REDIRECT, X_WWW_FORM_URLENCODED

Fields inherited from class org.springframework.extensions.webscripts.connector.AbstractClient

endpoint

Constructor Summary

Constructors

Constructor and Description
SlingshotRemoteClient()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	copyResponseStreamOutput(URL url, javax.servlet.http.HttpServletResponse res, OutputStream out, org.apache.commons.httpclient.HttpMethod method, String contentType, int bufferSize)
protected boolean	hasDocType(String content, String docType, boolean encode)
void	setSwfEnabled(boolean swfEnabled)

Methods inherited from class org.springframework.extensions.webscripts.connector.RemoteClient

buildURL, call, call, call, call, call, call, call, clone, createHttpClient, createProxyHost, getCookies, getRequestContentType, getRequestMethod, getTicket, getTicketName, processContentType, processResponse, setAllowHttpProxy, setAllowHttpsProxy, setBufferSize, setCommitResponseOnAuthenticationError, setConnectTimeout, setCookies, setDefaultContentType, setDefaultEncoding, setExceptionOnError, setHttpConnectionStalecheck, setHttpTcpNodelay, setMaxRedirects, setReadTimeout, setRemoveRequestHeaders, setRemoveResponseHeaders, setRequestContentType, setRequestMethod, setRequestProperties, setTicket, setTicketName, setUsernamePassword

Methods inherited from class org.springframework.extensions.webscripts.connector.AbstractClient

getEndpoint, getURL, setEndpoint

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SlingshotRemoteClient

public SlingshotRemoteClient()

Method Detail

setSwfEnabled

public void setSwfEnabled(boolean swfEnabled)

copyResponseStreamOutput

protected void copyResponseStreamOutput(URL url,
                            javax.servlet.http.HttpServletResponse res,
                            OutputStream out,
                            org.apache.commons.httpclient.HttpMethod method,
                            String contentType,
                            int bufferSize)
                                 throws IOException

Overrides:

copyResponseStreamOutput in class org.springframework.extensions.webscripts.connector.RemoteClient

Throws:

IOException

hasDocType

protected boolean hasDocType(String content,
                 String docType,
                 boolean encode)