org.owasp.validator.html.model

Class Tag

java.lang.Object

org.owasp.validator.html.model.Tag

public class Tag
extends Object

A model for HTML "tags" and the rules dictating their validation/filtration. Also contains information about their allowed attributes.

There is also some experimental (unused) code in here for generating a valid regular expression according to a policy file on a per-tag basis.

Author:

Arshan Dabirsiaghi

Constructor Summary

Constructors

Constructor and Description
Tag(String name, Map<String,Attribute> tagAttributes, String action)

Method Summary

Methods

Modifier and Type	Method and Description
String	getAction()
Attribute	getAttributeByName(String name) Returns an Attribute associated with a lookup name.
String	getName()
String	getRegularExpression() Returns a regular expression for validating individual tags.
boolean	isAction(String action) Indicates if the action for this tag matches the supplied action
Tag	mutateAction(String action)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Tag

public Tag(String name,
   Map<String,Attribute> tagAttributes,
   String action)

Method Detail

getAction

public String getAction()

Returns:

The action for this tag which is one of filter, validate or remove.

isAction

public boolean isAction(String action)

Indicates if the action for this tag matches the supplied action

Parameters:

action - The action to match against

Returns:

True if it matches

mutateAction

public Tag mutateAction(String action)

getRegularExpression

public String getRegularExpression()

Returns a regular expression for validating individual tags. Not used by the AntiSamy scanner, but you might find some use for this.

Returns:

A regular expression for the tag, i.e., "^$", or ""

getName

public String getName()

Returns:

The String name of the tag.

getAttributeByName

public Attribute getAttributeByName(String name)

Returns an Attribute associated with a lookup name.

Parameters:

name - The name of the allowed attribute by name.

Returns:

The Attribute object associated with the name, or