AppSensor DetectionPoint RE3 - Revision history

John Melton: wording

2010-06-01T14:28:30Z

wording

John Melton: updated method name

2010-06-01T14:25:36Z

updated method name

John Melton: Sample code for testing for GET when expecting POST attack

2010-04-06T12:38:58Z

Sample code for testing for GET when expecting POST attack

New page

Here is some sample code that can be used to detect RE3.

<pre>

//the execution of this line will throw an exception if an attack is found
boolean isAttack = AttackDetectorUtils.verifyRequestMethod(myServletRequest, AttackDetectorUtils.POST);
if (isAttack) {
notify user ... ???
}
</pre>

@@ Line 3: / Line 3: @@
 <pre>
-//the execution of this line will throw an exception if an attack is found
+//the execution of this line will create an exception if an attack is found
 boolean isValid = AttackDetectorUtils.verifyValidRequestMethod(myServletRequest, AttackDetectorUtils.POST);
 if (! isValid) {

@@ Line 4: / Line 4: @@
 //the execution of this line will throw an exception if an attack is found
-boolean isAttack = AttackDetectorUtils.verifyRequestMethod(myServletRequest, AttackDetectorUtils.POST);
+boolean isValid = AttackDetectorUtils.verifyValidRequestMethod(myServletRequest, AttackDetectorUtils.POST);
-if (isAttack) {
+if (! isValid) {
      notify user ...&nbsp;???
+}
 </pre>