jetty/web/safe_searchresults.jsp at 5cfffa827046c129a2acf98cd2a62a4d1cf3a070

mark.george / jetty

Find file

Newer

Older

jetty / web / safe_searchresults.jsp

Mark George on 28 Sep 2017 867 bytes Initial commit.

Raw Blame History

<%@page import="java.net.URL"%>
<%@page contentType="text/html" pageEncoding="UTF-8"%>
<%@page import="org.owasp.validator.html.*"%>
<%
/*  Ths JSP is used to demonstrate XSS attacks */

   String keywords = request.getParameter("keywords");

   Policy policy = Policy.getInstance(getServletContext().getResource("/antisamy.xml"));

   AntiSamy as = new AntiSamy();
   CleanResults cr = as.scan(keywords, policy, AntiSamy.SAX);
   keywords = cr.getCleanHTML();

%>
<html>
   <head>
      <title>Awesome Web Site - Search Results</title>
      <link rel="stylesheet" type="text/css" href="css/style.css"/>
   </head>
   <body>
      <div id="content">

         <%@include file="/WEB-INF/jspf/menu.jspf" %>

         <h1>Search results</h1>
         You searched for <%=keywords%>
         <br />
         <a href='search.jsp'>Back</a>
      </div>
   </body>
</html>