org.owasp.validator.css
Class CssScanner

java.lang.Object
  org.owasp.validator.css.CssScanner

public class CssScanner
extends Object

Encapsulates the parsing and validation of a CSS stylesheet or inline declaration. To make use of this class, instantiate the scanner with the desired policy and call either scanInlineSheet() or scanStyleSheet as appropriate.

Author:

Jason Li

See Also:

scanInlineStyle(String, String), scanStyleSheet(String)

Constructor Summary

CssScanner(Policy policy)
Constructs a scanner based on the given policy.

Method Summary

static void	main(String[] args) Deprecated.
CleanResults	scanInlineStyle(String taintedCss, String tagName) Scans the contents of an inline style declaration (ex.
CleanResults	scanStyleSheet(String taintedCss) Scans the contents of a full stylesheet (ex.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CssScanner

public CssScanner(Policy policy)

Constructs a scanner based on the given policy.

Parameters:

policy - the policy to follow when scanning

Method Detail

scanStyleSheet

public CleanResults scanStyleSheet(String taintedCss)
                            throws ScanException

Scans the contents of a full stylesheet (ex. a file based stylesheet or the complete stylesheet contents as declared within <style> tags)

Parameters:

taintedCss - a String containing the contents of the CSS stylesheet to validate

Returns:

a CleanResuts object containing the results of the scan

Throws:

ScanException - if an error occurs during scanning

scanInlineStyle

public CleanResults scanInlineStyle(String taintedCss,
                                    String tagName)
                             throws ScanException

Scans the contents of an inline style declaration (ex. in the style attribute of an HTML tag) and validates the style sheet according to this CssScanner's policy file.

Parameters:

taintedCss - a String containing the contents of the CSS stylesheet to validate

tagName - the name of the tag for which this inline style was declared

Returns:

a CleanResuts object containing the results of the scan

Throws:

ScanException - if an error occurs during scanning

main

public static void main(String[] args)
                 throws Exception

Deprecated.

Test method to demonstrate CSS scanning.

Parameters:

args - unused

Throws:

Exception - if any error occurs