Changing a httpservletrequest parameter and then passing the request

Question

I have a request which is already coming from a doFilter method, Now I want to clean the parameters of that request that is free from special characters. After changing the parameters I want to set that parameter and pass it to the same request.

I have tried request.setAttribute till now, that solves the problem but it doesn't sanitizes the parameter i.e: the parameter is not changed.

I have tried many things till now,

Some posts in stackoverflow, but that hasn't helped

How can I clean the parameter and again set it to request wrapper and then pass it to doFilter.

score 0 · Answer 1 · edited May 23 '17 at 12:15

0

You cannot clean the parameters of that request but you can wrap it with a subclass of HttpServletRequestWrapper that you can pass to the next filter in chain. Original request is passed in constructor.

The wrapper must have as a field a modifiable map initialized with the parameters of the other request (minus those you need to remove) and must extend all the parameters related methods in order to use that map for the implementation (and not those of the original request)

An example with similar requirements: https://stackoverflow.com/a/1422202/1536382

edited May 23 '17 at 12:15

Community

1
1

answered Jun 03 '16 at 18:41

Testo Testini

2,200
18
29

Can you give me an example of it, So if I have a variable `abc="this is * filled"` `abc1="this is filled"` How will I set it to HttpServletRequestWrapper and then pass it to the filterchain. – Ashutosh Anand Jun 06 '16 at 04:18
I added a link to the answer – Testo Testini Jun 06 '16 at 06:41

Changing a httpservletrequest parameter and then passing the request

1 Answers1