org.opensaml

Class ESAPISecurityConfig

java.lang.Object

org.opensaml.ESAPISecurityConfig

public class ESAPISecurityConfig
extends Object

Minimal implementation of OWASP ESAPI SecurityConfiguration, providing the support used within OpenSAML.

Constructor Summary

Constructors

Constructor and Description
ESAPISecurityConfig() Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
String	getAccessControlImplementation()
List	getAdditionalAllowedCipherModes()
List	getAllowedExecutables()
List	getAllowedFileExtensions()
int	getAllowedFileUploadSize()
int	getAllowedLoginAttempts()
boolean	getAllowMixedEncoding()
boolean	getAllowMultipleEncoding()
String	getApplicationName()
String	getAuthenticationImplementation()
String	getCharacterEncoding()
String	getCipherTransformation()
List	getCombinedCipherModes()
List	getDefaultCanonicalizationCodecs()
String	getDigitalSignatureAlgorithm()
int	getDigitalSignatureKeyLength()
boolean	getDisableIntrusionDetection()
String	getEncoderImplementation()
String	getEncryptionAlgorithm()
String	getEncryptionImplementation()
int	getEncryptionKeyLength()
String	getExecutorImplementation()
String	getFixedIV()
boolean	getForceHttpOnlyCookies()
boolean	getForceHttpOnlySession()
boolean	getForceSecureCookies()
boolean	getForceSecureSession()
String	getHashAlgorithm()
int	getHashIterations()
String	getHttpSessionIdName()
String	getHTTPUtilitiesImplementation()
String	getIntrusionDetectionImplementation()
String	getIVType()
String	getKDFPseudoRandomFunction()
boolean	getLenientDatesAccepted()
boolean	getLogApplicationName()
boolean	getLogEncodingRequired()
String	getLogFileName()
String	getLogImplementation()
int	getLogLevel()
boolean	getLogServerIP()
byte[]	getMasterKey()
byte[]	getMasterSalt()
int	getMaxHttpHeaderSize()
int	getMaxLogFileSize()
int	getMaxOldPasswordHashes()
String	getPasswordParameterName()
String	getPreferredJCEProvider()
Threshold	getQuota(String eventName)
String	getRandomAlgorithm()
String	getRandomizerImplementation()
long	getRememberTokenDuration()
File	getResourceFile(String filename)
InputStream	getResourceStream(String filename)
String	getResponseContentType()
int	getSessionAbsoluteTimeoutLength()
int	getSessionIdleTimeoutLength()
File	getUploadDirectory()
File	getUploadTempDirectory()
String	getUsernameParameterName()
String	getValidationImplementation()
Pattern	getValidationPattern(String typeName)
File	getWorkingDirectory()
boolean	overwritePlainText()
String	setCipherTransformation(String cipherXform)
void	setResourceDirectory(String dir)
boolean	useMACforCipherText()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ESAPISecurityConfig

public ESAPISecurityConfig()

Constructor.

Method Detail

getAccessControlImplementation

public String getAccessControlImplementation()

getAdditionalAllowedCipherModes

public List getAdditionalAllowedCipherModes()

getAllowedExecutables

public List getAllowedExecutables()

getAllowedFileExtensions

public List getAllowedFileExtensions()

getAllowedFileUploadSize

public int getAllowedFileUploadSize()

getAllowedLoginAttempts

public int getAllowedLoginAttempts()

getAllowMixedEncoding

public boolean getAllowMixedEncoding()

getAllowMultipleEncoding

public boolean getAllowMultipleEncoding()

getApplicationName

public String getApplicationName()

getAuthenticationImplementation

public String getAuthenticationImplementation()

getCharacterEncoding

public String getCharacterEncoding()

getCipherTransformation

public String getCipherTransformation()

getCombinedCipherModes

public List getCombinedCipherModes()

getDefaultCanonicalizationCodecs

public List getDefaultCanonicalizationCodecs()

getDigitalSignatureAlgorithm

public String getDigitalSignatureAlgorithm()

getDigitalSignatureKeyLength

public int getDigitalSignatureKeyLength()

getDisableIntrusionDetection

public boolean getDisableIntrusionDetection()

getEncoderImplementation

public String getEncoderImplementation()

getEncryptionAlgorithm

public String getEncryptionAlgorithm()

getEncryptionImplementation

public String getEncryptionImplementation()

getEncryptionKeyLength

public int getEncryptionKeyLength()

getExecutorImplementation

public String getExecutorImplementation()

getFixedIV

public String getFixedIV()

getForceHttpOnlyCookies

public boolean getForceHttpOnlyCookies()

getForceHttpOnlySession

public boolean getForceHttpOnlySession()

getForceSecureCookies

public boolean getForceSecureCookies()

getForceSecureSession

public boolean getForceSecureSession()

getHashAlgorithm

public String getHashAlgorithm()

getHashIterations

public int getHashIterations()

getHttpSessionIdName

public String getHttpSessionIdName()

getHTTPUtilitiesImplementation

public String getHTTPUtilitiesImplementation()

getIntrusionDetectionImplementation

public String getIntrusionDetectionImplementation()

getIVType

public String getIVType()

getKDFPseudoRandomFunction

public String getKDFPseudoRandomFunction()

getLenientDatesAccepted

public boolean getLenientDatesAccepted()

getLogApplicationName

public boolean getLogApplicationName()

getLogEncodingRequired

public boolean getLogEncodingRequired()

getLogFileName

public String getLogFileName()

getLogImplementation

public String getLogImplementation()

getLogLevel

public int getLogLevel()

getLogServerIP

public boolean getLogServerIP()

getMasterKey

public byte[] getMasterKey()

getMasterSalt

public byte[] getMasterSalt()

getMaxHttpHeaderSize

public int getMaxHttpHeaderSize()

getMaxLogFileSize

public int getMaxLogFileSize()

getMaxOldPasswordHashes

public int getMaxOldPasswordHashes()

getPasswordParameterName

public String getPasswordParameterName()

getPreferredJCEProvider

public String getPreferredJCEProvider()

getQuota

public Threshold getQuota(String eventName)

getRandomAlgorithm

public String getRandomAlgorithm()

getRandomizerImplementation

public String getRandomizerImplementation()

getRememberTokenDuration

public long getRememberTokenDuration()

getResourceFile

public File getResourceFile(String filename)

getResourceStream

public InputStream getResourceStream(String filename)
                              throws IOException

Throws:

IOException

getResponseContentType

public String getResponseContentType()

getSessionAbsoluteTimeoutLength

public int getSessionAbsoluteTimeoutLength()

getSessionIdleTimeoutLength

public int getSessionIdleTimeoutLength()

getUploadDirectory

public File getUploadDirectory()

getUploadTempDirectory

public File getUploadTempDirectory()

getUsernameParameterName

public String getUsernameParameterName()

getValidationImplementation

public String getValidationImplementation()

getValidationPattern

public Pattern getValidationPattern(String typeName)

getWorkingDirectory

public File getWorkingDirectory()

overwritePlainText

public boolean overwritePlainText()

setCipherTransformation

public String setCipherTransformation(String cipherXform)

setResourceDirectory

public void setResourceDirectory(String dir)

useMACforCipherText

public boolean useMACforCipherText()