com.atlassian.jira.security.xsrf

Class XsrfVulnerabilityDetectionSQLInterceptor

java.lang.Object

com.atlassian.jira.security.xsrf.XsrfVulnerabilityDetectionSQLInterceptor

All Implemented Interfaces:

org.ofbiz.core.entity.jdbc.interceptors.connection.SQLConnectionInterceptor, org.ofbiz.core.entity.jdbc.interceptors.SQLInterceptor

public class XsrfVulnerabilityDetectionSQLInterceptor
extends Object
implements org.ofbiz.core.entity.jdbc.interceptors.connection.SQLConnectionInterceptor

SQL Interceptor that detects changes to the database that aren't xsrf protected

Since:

v4.1

Constructor Summary

Constructors

Constructor and Description
XsrfVulnerabilityDetectionSQLInterceptor()

Method Summary

Modifier and Type	Method and Description
void	afterSuccessfulExecution(String sqlString, List<String> parameterValues, Statement statement, ResultSet resultSet, int rowsUpdated)
void	beforeExecution(String sqlString, List<String> parameterValues, Statement statement)
void	onConnectionReplaced(Connection connection, org.ofbiz.core.entity.jdbc.interceptors.connection.ConnectionPoolState connectionPoolState)
void	onConnectionTaken(Connection connection, org.ofbiz.core.entity.jdbc.interceptors.connection.ConnectionPoolState connectionPoolState)
void	onException(String sqlString, List<String> parameterValues, Statement statement, SQLException sqlException)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XsrfVulnerabilityDetectionSQLInterceptor

public XsrfVulnerabilityDetectionSQLInterceptor()

Method Detail

onConnectionTaken

public void onConnectionTaken(Connection connection,
                              org.ofbiz.core.entity.jdbc.interceptors.connection.ConnectionPoolState connectionPoolState)

Specified by:

onConnectionTaken in interface org.ofbiz.core.entity.jdbc.interceptors.connection.SQLConnectionInterceptor

onConnectionReplaced

public void onConnectionReplaced(Connection connection,
                                 org.ofbiz.core.entity.jdbc.interceptors.connection.ConnectionPoolState connectionPoolState)

Specified by:

onConnectionReplaced in interface org.ofbiz.core.entity.jdbc.interceptors.connection.SQLConnectionInterceptor

beforeExecution

public void beforeExecution(String sqlString,
                            List<String> parameterValues,
                            Statement statement)

Specified by:

beforeExecution in interface org.ofbiz.core.entity.jdbc.interceptors.SQLInterceptor

afterSuccessfulExecution

public void afterSuccessfulExecution(String sqlString,
                                     List<String> parameterValues,
                                     Statement statement,
                                     ResultSet resultSet,
                                     int rowsUpdated)

Specified by:

afterSuccessfulExecution in interface org.ofbiz.core.entity.jdbc.interceptors.SQLInterceptor

onException

public void onException(String sqlString,
                        List<String> parameterValues,
                        Statement statement,
                        SQLException sqlException)

Specified by:

onException in interface org.ofbiz.core.entity.jdbc.interceptors.SQLInterceptor