org.nuxeo.ecm.platform.web.common.ajax

Class AjaxProxyServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

org.nuxeo.ecm.platform.web.common.ajax.AjaxProxyServlet

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

public class AjaxProxyServlet
extends javax.servlet.http.HttpServlet

Simple proxy servlets.

Used for Ajax requests that needs to be proxied to avoid XSiteScripting issues.

In order to avoid "open proxiying", only urls configured in the AjaxProxyComponent via the extension point "proxyableURL" can be proxied.

Author:

tiry

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
protected static ReentrantReadWriteLock	cacheLock
protected static Map<String,String>	requestsCache
protected static AjaxProxyService	service
static String	X_METHOD_HEADER

Constructor Summary

Constructors

Constructor and Description
AjaxProxyServlet()

Method Summary

Modifier and Type	Method and Description
protected void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
protected void	doPost(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
protected void	doPut(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
protected static String	doRequest(String method, String targetURL, javax.servlet.http.HttpServletRequest req)
protected static AjaxProxyService	getService()
protected static String	getSessionId(javax.servlet.http.HttpServletRequest req)
protected static void	handleProxy(String method, javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X_METHOD_HEADER

public static final String X_METHOD_HEADER

See Also:

Constant Field Values

service

protected static AjaxProxyService service

requestsCache

protected static Map<String,String> requestsCache

cacheLock

protected static final ReentrantReadWriteLock cacheLock

Constructor Detail

AjaxProxyServlet

public AjaxProxyServlet()

Method Detail

getService

protected static AjaxProxyService getService()

doGet

protected void doGet(javax.servlet.http.HttpServletRequest req,
                     javax.servlet.http.HttpServletResponse resp)
              throws javax.servlet.ServletException,
                     IOException

Overrides:

doGet in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

doPost

protected void doPost(javax.servlet.http.HttpServletRequest req,
                      javax.servlet.http.HttpServletResponse resp)
               throws javax.servlet.ServletException,
                      IOException

Overrides:

doPost in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

doPut

protected void doPut(javax.servlet.http.HttpServletRequest req,
                     javax.servlet.http.HttpServletResponse resp)
              throws javax.servlet.ServletException,
                     IOException

Overrides:

doPut in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

handleProxy

protected static void handleProxy(String method,
                                  javax.servlet.http.HttpServletRequest req,
                                  javax.servlet.http.HttpServletResponse resp)
                           throws IOException

Throws:

IOException

getSessionId

protected static String getSessionId(javax.servlet.http.HttpServletRequest req)

doRequest

protected static String doRequest(String method,
                                  String targetURL,
                                  javax.servlet.http.HttpServletRequest req)
                           throws IOException

Throws:

IOException