Kuali Mobility
  1. Kuali Mobility
  2. MOBILITY-416

DEV - Create a javaee filter or spring interceptor to encapsulate the removeXSSAttack method

    Details

    • Type: Task Task
    • Status: Resolved Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 2.3
    • Fix Version/s: 3.0
    • Component/s: Core, Technical Debt
    • Labels:
      None
    • Rank (Obsolete):
      7493
    • Global Rank:
      52090
    • Sprint:
      Mobility 2.4

      Description

      Create a spring interceptor (or alternately a javaee servlet filter) to perform the same function as the removeXSSAttack method added to multiple web Controllers throughout the application. One such example is the ComputerLabsController.java in the computer labs tool. Find all instances of such a method in any controller and remove that method and its use. Modify the configuration for the web application (mdot-webapp and/or shared-webapp) to use the interceptor (or filter) for all JSP requests.

        Issue Links

          Activity

          There are no comments yet on this issue.

            People

            • Assignee:
              NurulHaque Murshed
              Reporter:
              Joe Swanson (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 2 days
                2d
                Remaining:
                Remaining Estimate - 2 days
                2d
                Logged:
                Time Spent - Not Specified
                Not Specified

                  Agile

                    Structure Helper Panel