1

我无法使用ESAPI类中存在的方法'

    java.lang.String getValidInput(java.lang.String context,
                                  java.lang.String input,
                                  java.lang.String type,
                                  int maxLength,
                                  boolean allowNull)
                                      throws ValidationException,
                                       IntrusionException

      Parameters:
         type - The regular expression name that maps to the actual regular expression from "ESAPI.properties".

如何从ESAPI.properties文件中传递参数类型？任何使用我可以参考的属性文件值的示例？

4

2 回答 2

6

这是一个示例调用，我正在验证“to”地址字段：

validator.getValidInput("toAddress", it.next(), "Email", Email.MAX_ADDRESS_SIZE, true)

ESAPI 假设您使用的是 IDE 或可以访问直接源。如果您使用的是 Eclipse，只需将鼠标悬停在方法名称上，参数类型就会显示出来。

===更新===

这是直接来自 javadoc 的 rip：

/**
     * Returns canonicalized and validated input as a String. Invalid input will generate a descriptive ValidationException,
     * and input that is clearly an attack will generate a descriptive IntrusionException.
     *
     * @param context
     *      A descriptive name of the parameter that you are validating (e.g., LoginPage_UsernameField). This value is used by any logging or error handling that is done with respect to the value passed in.
     * @param input
     *      The actual user input data to validate.
     * @param type
     *      The regular expression name that maps to the actual regular expression from "ESAPI.properties".
     * @param maxLength
     *      The maximum post-canonicalized String length allowed.
     * @param allowNull
     *      If allowNull is true then an input that is NULL or an empty string will be legal. If allowNull is false then NULL or an empty String will throw a ValidationException.
     *
     * @return The canonicalized user input.
     *
     * @throws ValidationException
     * @throws IntrusionException
     */
于 2014-03-26T18:06:31.983 回答
0 
ESAPI.validator().getValidInput("Validationofinput", StringInput, "Onlycharacters",200, true);
于 2017-02-01T10:02:38.710 回答