org.owasp.security.logging.mask

Class NLFThrowableConverter

java.lang.Object

ch.qos.logback.core.pattern.Converter<E>

ch.qos.logback.core.pattern.FormattingConverter<E>

ch.qos.logback.core.pattern.DynamicConverter<ch.qos.logback.classic.spi.ILoggingEvent>

ch.qos.logback.classic.pattern.ClassicConverter

ch.qos.logback.classic.pattern.ThrowableHandlingConverter

ch.qos.logback.classic.pattern.ThrowableProxyConverter

org.owasp.security.logging.mask.NLFThrowableConverter

All Implemented Interfaces:

ch.qos.logback.core.spi.ContextAware, ch.qos.logback.core.spi.LifeCycle

public class NLFThrowableConverter
extends ch.qos.logback.classic.pattern.ThrowableProxyConverter

This converter is used to encode any carriage returns and line feeds to prevent log injection attacks in exception messages This converter uses a NLFThrowableProxy that acts as a proxy to intercept calls to IThrowable.getMessage to replace the characters in the message

Field Summary

Fields inherited from class ch.qos.logback.classic.pattern.ThrowableProxyConverter

BUILDER_CAPACITY

Fields inherited from class ch.qos.logback.core.pattern.DynamicConverter

started

Constructor Summary

Constructors

Constructor and Description
NLFThrowableConverter()

Method Summary

Modifier and Type	Method and Description
protected String	throwableProxyToString(ch.qos.logback.classic.spi.IThrowableProxy tp)

Methods inherited from class ch.qos.logback.classic.pattern.ThrowableProxyConverter

convert, extraData, start, stop, subjoinSTEPArray

Methods inherited from class ch.qos.logback.core.pattern.DynamicConverter

addError, addError, addInfo, addInfo, addStatus, addWarn, addWarn, getContext, getFirstOption, getOptionList, isStarted, setContext, setOptionList

Methods inherited from class ch.qos.logback.core.pattern.FormattingConverter

getFormattingInfo, setFormattingInfo, write

Methods inherited from class ch.qos.logback.core.pattern.Converter

getNext, setNext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NLFThrowableConverter

public NLFThrowableConverter()

Method Detail

throwableProxyToString

protected String throwableProxyToString(ch.qos.logback.classic.spi.IThrowableProxy tp)

Overrides:

throwableProxyToString in class ch.qos.logback.classic.pattern.ThrowableProxyConverter