HDIV (HTTP Data Integrity Validator) is an opensource Web Application Security Framework for a java web applications.
Questions tagged [hdiv]
82 questions
6
votes
2 answers
Difference between HDIV and ESAPI
I am planing to develop a web application using Spring MVC and trying to figure out which is the best library to use to over come Top 10 OWASP issue. I came to see two HDIV and ESAPI, can any one please help me to understand the difference between…
Kumar
- 1,106
- 4
- 15
- 33
5
votes
1 answer
HttpOnly for request cookies
Is there a way of setting a request cookie httpOnly? If not why can't we set it? I've set the response cookies to httpOnly using weblogx.xml/weblogic server.
avijendr
- 3,958
- 2
- 31
- 46
5
votes
2 answers
Spring form and controller UTF-8 bad encoding
I have a problem with my UTF-8 encoding. My webapp uses french words that are correctly displayed in my jsp, but not in my controller after a POST.
For example, in my jsp I have:
Prénom de mon père
and when I post the form, the controller…
thibon
- 360
- 2
- 7
- 19
3
votes
1 answer
How to Integrate HDIV and ExtJS
I'm using Spring MVC v3.1.0 and HDIV (HTTP Data Integrity Validator) v2.1.0 as server-side framework and ExtJS v4.0 as client-side framework.
Now, I'm confused how to generate secure forms and links which contains HDIV state
and how to…
Fitrah M
- 983
- 3
- 17
- 31
2
votes
0 answers
HDV 3.4 does not have support for spring form tag classes
In HDIV 3.4, we don't see support for OptionsTagHDIV and InputTagHDIV. How do we achieve the same in latest version of HDIV?
Ganesh
- 21
- 4
2
votes
2 answers
Best implementation 'Access' User in spring security
I have a problem to implement security in my application ...
I have custom authentication and use @PreAuthorize to handle my user authorization. This works fine. Now I want to implement Access Control for each user, which means in my application…
2
votes
1 answer
Hdiv compliant url setting through Javascript, ajax
I have inherited legacy code that invokes a Javascript in external file for a link action.
Below is a snippet of the JS function
function webaction(){
$.ajax({
url:contextpath + '/docheck.html'
// more logic below
As can be seen, since is…
Happy_coding
- 19
- 1
- 5
2
votes
1 answer
How do I retrieve a multipart file uploaded using Ajax in a website that uses HDIV?
We have a website running on Tomcat 7.0.27, and we use the following Ajax JavaScript code to dynamically upload an image in our website:
var fileInput = document.getElementById("uploadfile");
var formData = new…
MarcFasel
- 1,080
- 10
- 19
2
votes
1 answer
OWASP top 10 web app security risks mitigation in AngularJS
I'm using HDIV for JSF and Spring MVC applications to mitigate OWASP top 10 security risks. Now I have to implement the same in AngularJS.
Is there any library avilable similar to HDIV for AngularJS?
seenukarthi
- 8,241
- 10
- 47
- 68
1
vote
1 answer
howto change cache removal strategy in hdiv
I am using the HDIV Web Application Security Framework for a java web application. Every new web-page-request generates hdiv-internal security information that is cached and used for security checks.
I have the following szenario:
I have one order…
k3b
- 14,517
- 7
- 53
- 85
1
vote
1 answer
Unable to locate namespace handler for schema namespace [http://www.hdiv.org/schema/hdiv]
While deploying the application in weblogic server, i am getting below error -
2018-04-13 15:18:10,856 [[ACTIVE] ExecuteThread: '0' for queue:
'weblogic.kernel.Default (self-tuning)'] ERROR
org.springframework.web.context.ContextLoader.Context…
Derrick
- 3,669
- 5
- 35
- 50
1
vote
1 answer
HDIV validation change generic error message for field
I'm trying to change the generic hdiv validation message coming from MessageResources.properties:
hdiv.editable.error={0} has not allowed characters
I can override the message in my own messages.properties with:
hdiv.editable.error = {0} contains…
Stefan
- 1,096
- 8
- 10
1
vote
0 answers
The issue with cascading dropdown lists using ajax and HDIV
I integrated HDIV and Spring MVC. Now I have a form on which there are three dropdown lists contract, taskorder and subtask. The select change of contract will update the content of taskorder dropdown list via ajax and then the select change of the…
Alex
- 617
- 2
- 9
- 21
1
vote
2 answers
How to ignore validation in HDIV when integrating with primefaces datatable component
I am using Primefaces Datatable component. This data table component creates a hidden field dynamically on the browser.
Joy Chowdhury
- 73
- 1
- 10
1
vote
1 answer
HDIV - How to modify the URL param values in Ajax request?
I am trying to integrate HDIV into my existing application. But I am stuck in solving the below problem.
Use Case:
1. I have a big form with huge number of fields. When I change a value in a drop down, I make an Ajax call by passing the selected…
Raj Chowdary
- 23
- 2