logger.info(EELFLoggerDelegate.applicationLogger, "denyXSS() replacing ×eclgn with empty string for request value : " + value);
value=value.replaceAll("×eclgn", "");
}
+ while(value.contains("%25")) {
+ value = value.replaceAll("%25", "%");
+ }
value = ESAPI.encoder().canonicalize(value);
for (Pattern xssInputPattern : XSS_INPUT_PATTERNS) {
if (xssInputPattern.matcher(value).matches()) {
flag = Boolean.TRUE;
break;
}
-
}
}
} catch (Exception e) {
- logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + value, e);
+ logger.error(EELFLoggerDelegate.errorLogger, "denyXSS() failed for request with value : " + e.getMessage());
+ logger.debug(EELFLoggerDelegate.debugLogger, "denyXSS() failed for request with value : " + value, e);
}
return flag;
public void setXSS_INPUT_PATTERNS(List<Pattern> xSS_INPUT_PATTERNS) {
XSS_INPUT_PATTERNS = xSS_INPUT_PATTERNS;
}
-
}
\ No newline at end of file