POST problem with j2ee Servlet Filter

Ask a Question related to Coldfusion - Advanced Techniques, Design and Development.

  1. #1

    Default POST problem with j2ee Servlet Filter

    Hi, I defined a j2ee Servlet Filter to apply some security checks, adding to
    web.xml the following definition: <filter>
    <filter-name>SecurityFilter</filter-name>
    <filter-class>com.bosslab.abs.util.filter.SecurityFilter</filter-class>
    </filter> <filter-mapping> <filter-name>SecurityFilter</filter-name>
    <url-pattern>/*</url-pattern> </filter-mapping> The filter just
    checks the content of the request and blocks some vulnerabilities (like comand
    iinjection), otherwise the request is passed as it is. This works well for GET
    and POST for JSP pages, but works only with GET and not with POST for CFM
    pages. Here is an example that does not work: <html> <head> <meta
    http-equiv='Content-Type' content='text/html;CHARSET=iso-8859-1'> <meta
    name='description' content='BEA WebLogic Server'> <meta name='keywords'
    content='BEA WebLogic Server'> <title>TestPost Page1</title> <cfparam
    name='color' default=''> </head> <cfif color NEQ ''> <cfif color EQ
    'Red'> <p><h1>The color is red!</h1></p> <cfelseif
    color EQ 'White'> <p><h1>The color is white!</h1></p>
    <cfelse> <p><h1>The color is blue!</h1></p> </cfif>
    <cfelse> <p><h1>No color defined!</h1></p> </cfif> <form
    method='post' action='Page1.cfm' > <input type='submit' name='color'
    value='red'> <input type='submit' name='color' value='white'>
    <input type='submit' name='color' value='blue'> </form> <br> </body>
    </html> Does anybody know how to solve this problem? Thanks Romano

    guir Guest

  2. Similar Questions and Discussions

    1. Blur Filter problem
      I am having a problem with blur filters I have applied to a game.The filters work fine when viewed in an unexpanded view,but as soon as I go full...
    2. Flex J2EE filter failing to init
      I've had a Flex app deployed for several months on a stable WebSphere v5.1 server. I recently restarted the server and the app failed to come up....
    3. What is the CF equivalent to a J2EE servlet?
      Hello, When a form is submitted, what handle the processing on the server? In other words, what takes the place of a J2ee servlet? KT
    4. Install Problem: ColdFusion MX and J2EE HybridApplications
      I am having trouble installing this sample application. Does anyone have instructions for installing it on CF MX 6.1 developer version. I need to...
    5. Filter Problem
      "Casey Howlett" <caseyh@heli-dyne.com> wrote: Casey, the concatenation would look something like this: Dim strFilter As String ...
  3. #2

    Default Re: POST problem with j2ee Servlet Filter

    Hey, was this ever solved? I'm running into the same issue, and have been stumped on it for days. I've read where websphere doesn't pass the query string from one page to the next (http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg1PK78371), and I'm thinking that's the issue. I'll keep you posted.
    Unregistered Guest

  4. #3

    Default POST problem with j2ee Servlet Filter

    the slight fix is to set your <form> attribute enctype="multipart/form-data", but you still are left with the problem of getting into cfadministrator, since I haven't figured out a way to modify anything in the CFIDE folder
    Unregistered Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139