Tomcat 10.1.19 · org.apache.tomcat.util.http.RequestUtil

Access	Constructor and Description
private	RequestUtil()

Method Summary

Modifier and Type	Method and Description
public static boolean	isSameOrigin(HttpServletRequest request, String origin)
public static boolean	Returns: `true` if the origin was valid isValidOrigin(String The origin URI origin) Checks if a given origin is valid or not.
public static String	Returns: The normalized path or `null` if the path cannot be normalized normalize(String Relative path to be normalized path) Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it Warning - This method is useful only for normalizing application-generated paths.
public static String	Returns: The normalized path or `null` if the path cannot be normalized normalize(String Relative path to be normalized path, boolean Should '\\' be replaced with '/' replaceBackSlash) Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it Warning - This method is useful only for normalizing application-generated paths.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

RequestUtil	back to summary
private RequestUtil()

isSameOrigin	back to summary
public static boolean isSameOrigin(HttpServletRequest request, String origin)

isValidOrigin back to summary

isValidOrigin	back to summary
public static boolean isValidOrigin(String origin) Checks if a given origin is valid or not. Criteria: If an encoded character is present in origin, it's not valid. If origin is "null", it's valid. Origin should be a valid `URI` Parameters origin:String The origin URI Returns:boolean `true` if the origin was valid See Also RFC952

public static boolean isValidOrigin(String origin)

Checks if a given origin is valid or not. Criteria:

Parameters

Returns:boolean

true if the origin was valid

See Also

RFC952

normalize back to summary

normalize	back to summary
public static String normalize(String path) Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it Warning - This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input. Parameters path:String Relative path to be normalized Returns:String The normalized path or `null` if the path cannot be normalized

public static String normalize(String path)

Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it

Warning

- This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input.

Parameters

Returns:String

The normalized path or null if the path cannot be normalized

normalize back to summary

normalize	back to summary
public static String normalize(String path, boolean replaceBackSlash) Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it Warning - This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input. Parameters path:String Relative path to be normalized replaceBackSlash:boolean Should '\\' be replaced with '/' Returns:String The normalized path or `null` if the path cannot be normalized

public static String normalize(String path, boolean replaceBackSlash)

Normalize a relative URI path that may have relative values ("/./", "/../", and so on ) it it

Warning

- This method is useful only for normalizing application-generated paths. It does not try to perform security checks for malicious input.

Parameters

Returns:String

The normalized path or null if the path cannot be normalized