package +zoccolo+.web.sanitizer; import org.owasp.validator.html.AntiSamy; import org.owasp.validator.html.CleanResults; import org.owasp.validator.html.Policy; import org.owasp.validator.html.PolicyException; import org.owasp.validator.html.ScanException; public class XssSanitizer { private AntiSamy antiSamy; private Policy policy; public XssSanitizer(String policyFilePath) throws PolicyException{ this.policy = Policy.getInstance(this.getClass().getResourceAsStream(policyFilePath)); this.antiSamy = new AntiSamy(this.policy); } public CleanResults scan(String input) throws ScanException, PolicyException{ if(input == null) throw new ScanException("input parameter is null."); CleanResults cleanResults = this.antiSamy.scan(input); return cleanResults; } public AntiSamy getAntiSamy() { return antiSamy; } public Policy getPolicy() { return policy; } /* screwdriver_knife */ }