Does someone run the valve BadInputFilterValve with Tomcat 5.5? This valve
immunes against all XSS, HTML injection, and command injection exploits. It
has been written by Jason Brittain using Tomcat 4
(http://examples.oreilly.com/tomcat/tomcatbook-examples-1.0.zip).
I made it compile and install but without the desired final filtering result.
The ValveContext class (used in the invoke method) doesn't exist anymore in 5.5
and I am not sure if I pass correctly the request down the chain of Valves...
Any help would be appreciated.
Thanks,
Matrix
---------------------------------
Lèche-vitrine ou lèche-écran ? Yahoo! Magasinage.