Does someone run the valve BadInputFilterValve with Tomcat 5.5?  This valve 
immunes against all XSS, HTML injection, and command injection exploits.  It 
has been written by Jason Brittain using Tomcat 4 
(http://examples.oreilly.com/tomcat/tomcatbook-examples-1.0.zip).
 
I made it compile and install but without the desired final filtering result.  
The ValveContext class (used in the invoke method) doesn't exist anymore in 5.5 
and I am not sure if I pass correctly the request down the chain of Valves...

Any help would be appreciated.

Thanks,
Matrix
                
---------------------------------
Lèche-vitrine ou lèche-écran ? Yahoo! Magasinage.

Reply via email to