com.github.dbadia.sqrl.server.util

Class SqrlSanitize

java.lang.Object

com.github.dbadia.sqrl.server.util.SqrlSanitize

public class SqrlSanitize
extends Object

Helper class to ensure data coming from the Internet is sanitized against security vulnerabilities such as XSS. If any issues are found, SqrlIllegalDataException is thrown to halt the transaction

Author:

Dave Badia

Constructor Summary

Constructors

Constructor and Description
SqrlSanitize()

Method Summary

Modifier and Type	Method and Description
static void	inspectIncomingSqrlData(String data) Performs basic security checks for size and character format for all SQRL tokens: nut, correlator, param, etc

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SqrlSanitize

public SqrlSanitize()

Method Detail

inspectIncomingSqrlData

public static void inspectIncomingSqrlData(String data)
                                    throws SqrlIllegalDataException

Performs basic security checks for size and character format for all SQRL tokens: nut, correlator, param, etc

Parameters:

data - the data to be examined

Throws:

SqrlIllegalDataException - if data validation fails