javax.servlet.ServletResponse#isCommitted

Source File: HttpHeaderSecurityFilter.java From Tomcat7.0.67 with Apache License 2.0

6 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {

    if (response.isCommitted()) {
        throw new ServletException(sm.getString("httpHeaderSecurityFilter.committed"));
    }

    // HSTS
    if (hstsEnabled && request.isSecure() && response instanceof HttpServletResponse) {
        ((HttpServletResponse) response).setHeader(HSTS_HEADER_NAME, hstsHeaderValue);
    }

    // anti click-jacking
    if (antiClickJackingEnabled && response instanceof HttpServletResponse) {
        ((HttpServletResponse) response).setHeader(
                ANTI_CLICK_JACKING_HEADER_NAME, antiClickJackingHeaderValue);
    }

    // Block content type sniffing
    if (blockContentTypeSniffingEnabled && response instanceof HttpServletResponse) {
        ((HttpServletResponse) response).setHeader(BLOCK_CONTENT_TYPE_SNIFFING_HEADER_NAME,
                BLOCK_CONTENT_TYPE_SNIFFING_HEADER_VALUE);
    }
    chain.doFilter(request, response);
}

Source File: RequestDispatcherImpl.java From knopflerfish.org with BSD 3-Clause "New" or "Revised" License

6 votes

@Override
public void forward(ServletRequest request, ServletResponse response)
    throws IOException, ServletException
{

  if (!(request instanceof HttpServletRequest && response instanceof HttpServletResponse)) {
    throw new ServletException("Must be http request");
  }

  if (response.isCommitted()) {
    throw new IllegalStateException(
                                    "Cannot forward request after response is committed");
  }
  response.reset();

  service((RequestImpl) request, (ResponseImpl) response);

  response.flushBuffer();
}

Source File: ExpiresFilter.java From tomcatsrc with Apache License 2.0

5 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {
    if (request instanceof HttpServletRequest &&
            response instanceof HttpServletResponse) {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        if (response.isCommitted()) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString(
                        "expiresFilter.responseAlreadyCommited",
                        httpRequest.getRequestURL()));
            }
            chain.doFilter(request, response);
        } else {
            XHttpServletResponse xResponse = new XHttpServletResponse(
                    httpRequest, httpResponse);
            chain.doFilter(request, xResponse);
            if (!xResponse.isWriteResponseBodyStarted()) {
                // Empty response, manually trigger
                // onBeforeWriteResponseBody()
                onBeforeWriteResponseBody(httpRequest, xResponse);
            }
        }
    } else {
        chain.doFilter(request, response);
    }
}

Source File: EntityHttpServletRequest.java From sakai with Educational Community License v2.0

5 votes

public void forward(ServletRequest request, ServletResponse response) {
    if (request == null || response == null) {
        throw new IllegalArgumentException("request and response cannot be null");
    }
    if (response.isCommitted()) {
        throw new IllegalStateException("Cannot perform forward - response is already committed");
    }
    getEntityHttpServletResponse(response).setForwardedUrl(this.url);
}

Source File: GatewayServlet.java From knox with Apache License 2.0

5 votes

@Override
public void doFilter( ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain ) throws IOException, ServletException {
  try {
    auditService.createContext();
    GatewayFilter f = filter;
    if( f != null ) {
      try {
        f.doFilter( servletRequest, servletResponse );

        /* if response is committed in case of SSO redirect no need to apply further filters */
        if(!servletResponse.isCommitted()) {
          //TODO: This should really happen naturally somehow as part of being a filter.  This way will cause problems eventually.
          chain.doFilter( servletRequest, servletResponse );
        }

      } catch( IOException | RuntimeException | ServletException e ) {
        LOG.failedToExecuteFilter( e );
        throw e;
      }
    } else {
      ((HttpServletResponse)servletResponse).setStatus( HttpServletResponse.SC_SERVICE_UNAVAILABLE );
    }
    auditLog(servletRequest, servletResponse);
  } finally {
    auditService.detachContext();
  }
}

Source File: ResponseTag.java From ontopia with Apache License 2.0

5 votes

/**
 * Process the start tag for this instance.
 */
@Override
public int doStartTag() throws JspTagException {

  // Get navigator application
  NavigatorApplicationIF navApp = NavigatorUtils.getNavigatorApplication(pageContext);

  // Get navigator configuration
  NavigatorConfigurationIF navConf = navApp.getConfiguration();

  // Get content type
  String ctype = content_type;
  if (content_type == null)
    ctype = navConf.getProperty(NavigatorConfigurationIF.DEF_CONTENT_TYPE, "text/html");

  // Get character encoding
  String charEnc = charset;
  if (charEnc == null)
    charEnc = navConf.getProperty(NavigatorConfigurationIF.DEF_CHAR_ENCODING, "utf-8");

  // Get response instance
  ServletResponse response = pageContext.getResponse();
  if (response != null && !response.isCommitted())

    // Set Content-type header
    if (ctype != null) {
      if (charEnc != null) {
        log.debug("set content-type to: " + ctype + "; charset=" + charEnc);
        response.setContentType(ctype + "; charset=" + charEnc);
      } else {
        log.debug("set content-type to: " + ctype);
        response.setContentType(ctype);
      }
    } else {
      log.debug("not setting content-type");
    }

  // empty tag has not to eval anything
  return SKIP_BODY;
}

Source File: EntityHttpServletRequest.java From sakai with Educational Community License v2.0

5 votes

public void forward(ServletRequest request, ServletResponse response) {
    if (request == null || response == null) {
        throw new IllegalArgumentException("request and response cannot be null");
    }
    if (response.isCommitted()) {
        throw new IllegalStateException("Cannot perform forward - response is already committed");
    }
    getEntityHttpServletResponse(response).setForwardedUrl(this.url);
}

Source File: MockRequestDispatcher.java From live-chat-engine with Apache License 2.0

5 votes

@Override
public void forward(ServletRequest request, ServletResponse response) {
	if (response.isCommitted()) {
		throw new IllegalStateException("Cannot perform forward - response is already committed");
	}
	getMockHttpServletResponse(response).setForwardedUrl(this.url);
	if (logger.isDebugEnabled()) {
		logger.debug("MockRequestDispatcher: forwarding to URL [" + this.url + "]");
	}
}

Source File: RewriteFilter.java From development with Apache License 2.0

5 votes

/**
 * Rewrites the outgoing stream to make sure URLs and headers
 * are correct. The incoming request is first processed to 
 * identify what resource we want to proxy.
 * 
 * @see javax.servlet.Filter#doFilter(javax.servlet.ServletRequest, javax.servlet.ServletResponse, javax.servlet.FilterChain)
 */
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain filterChain) throws IOException, ServletException {
    
    if (response.isCommitted()) {
        log.info("Not proxying, already committed.");
        return;
    } else if (!(request instanceof HttpServletRequest)) {
        log.info("Request is not HttpRequest, will only handle HttpRequests.");
        return;
    } else if (!(response instanceof HttpServletResponse)) {
        log.info("Request is not HttpResponse, will only handle HttpResponses.");
        return;
    } else {
        HttpServletResponse httpResponse = (HttpServletResponse) response;
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        
        Server server = serverChain.evaluate(httpRequest);
        if (server == null) {
            log.info("Could not find a rule for this request, will not do anything.");
            filterChain.doFilter(request, response);
        } else {
            httpRequest.setAttribute("proxyServer", server);
            
            String ownHostName = request.getServerName() + ":" + request.getServerPort();
            UrlRewritingResponseWrapper wrappedResponse;
            wrappedResponse = new UrlRewritingResponseWrapper(httpResponse, server, ownHostName, httpRequest.getContextPath(), serverChain);
            
            filterChain.doFilter(httpRequest, wrappedResponse);

            wrappedResponse.processStream();
        }
    }
}

Source File: HttpHeaderSecurityFilter.java From tomcatsrc with Apache License 2.0

5 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {

    if (response instanceof HttpServletResponse) {
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        if (response.isCommitted()) {
            throw new ServletException(sm.getString("httpHeaderSecurityFilter.committed"));
        }

        // HSTS
        if (hstsEnabled && request.isSecure()) {
            httpResponse.setHeader(HSTS_HEADER_NAME, hstsHeaderValue);
        }

        // anti click-jacking
        if (antiClickJackingEnabled) {
            httpResponse.setHeader(ANTI_CLICK_JACKING_HEADER_NAME, antiClickJackingHeaderValue);
        }

        // Block content type sniffing
        if (blockContentTypeSniffingEnabled) {
            httpResponse.setHeader(BLOCK_CONTENT_TYPE_SNIFFING_HEADER_NAME,
                    BLOCK_CONTENT_TYPE_SNIFFING_HEADER_VALUE);
        }

        // cross-site scripting filter protection
        if (xssProtectionEnabled) {
            httpResponse.setHeader(XSS_PROTECTION_HEADER_NAME, XSS_PROTECTION_HEADER_VALUE);
        }
    }

    chain.doFilter(request, response);
}

Source File: ExpiresFilter.java From Tomcat8-Source-Read with MIT License

5 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {
    if (request instanceof HttpServletRequest &&
            response instanceof HttpServletResponse) {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        if (response.isCommitted()) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString(
                        "expiresFilter.responseAlreadyCommited",
                        httpRequest.getRequestURL()));
            }
            chain.doFilter(request, response);
        } else {
            XHttpServletResponse xResponse = new XHttpServletResponse(
                    httpRequest, httpResponse);
            chain.doFilter(request, xResponse);
            if (!xResponse.isWriteResponseBodyStarted()) {
                // Empty response, manually trigger
                // onBeforeWriteResponseBody()
                onBeforeWriteResponseBody(httpRequest, xResponse);
            }
        }
    } else {
        chain.doFilter(request, response);
    }
}

Source File: MockRequestDispatcher.java From spring4-understanding with Apache License 2.0

5 votes

@Override
public void forward(ServletRequest request, ServletResponse response) {
	Assert.notNull(request, "Request must not be null");
	Assert.notNull(response, "Response must not be null");
	if (response.isCommitted()) {
		throw new IllegalStateException("Cannot perform forward - response is already committed");
	}
	getMockHttpServletResponse(response).setForwardedUrl(this.resource);
	if (logger.isDebugEnabled()) {
		logger.debug("MockRequestDispatcher: forwarding to [" + this.resource + "]");
	}
}

Source File: MockRequestDispatcher.java From spring4-understanding with Apache License 2.0

5 votes

@Override
public void forward(ServletRequest request, ServletResponse response) {
	Assert.notNull(request, "Request must not be null");
	Assert.notNull(response, "Response must not be null");
	if (response.isCommitted()) {
		throw new IllegalStateException("Cannot perform forward - response is already committed");
	}
	getMockHttpServletResponse(response).setForwardedUrl(this.resource);
	if (logger.isDebugEnabled()) {
		logger.debug("MockRequestDispatcher: forwarding to [" + this.resource + "]");
	}
}

Source File: ExpiresFilter.java From Tomcat7.0.67 with Apache License 2.0

5 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {
    if (request instanceof HttpServletRequest &&
            response instanceof HttpServletResponse) {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        if (response.isCommitted()) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString(
                        "expiresFilter.responseAlreadyCommited",
                        httpRequest.getRequestURL()));
            }
            chain.doFilter(request, response);
        } else {
            XHttpServletResponse xResponse = new XHttpServletResponse(
                    httpRequest, httpResponse);
            chain.doFilter(request, xResponse);
            if (!xResponse.isWriteResponseBodyStarted()) {
                // Empty response, manually trigger
                // onBeforeWriteResponseBody()
                onBeforeWriteResponseBody(httpRequest, xResponse);
            }
        }
    } else {
        chain.doFilter(request, response);
    }
}

Source File: RestAsyncListener.java From servicecomb-java-chassis with Apache License 2.0

5 votes

@Override
public void onTimeout(AsyncEvent event) throws IOException {
  // in this time, maybe:
  // 1.invocation in executor's queue
  // 2.already executing in executor
  // 3.already send response
  // to avoid concurrent, must lock request
  ServletRequest request = event.getSuppliedRequest();
  HttpServletRequestEx requestEx = (HttpServletRequestEx) request.getAttribute(RestConst.REST_REQUEST);
  LOGGER.error("Rest request timeout, method {}, path {}.", requestEx.getMethod(), requestEx.getRequestURI());

  // Waiting till executing in executor done. This operation may block container pool and make timeout requests in executor's
  // queue getting executed, and will cause bad performance. So default timeout is setting to -1 to disable timeout.
  synchronized (requestEx) {
    ServletResponse response = event.getAsyncContext().getResponse();
    if (!response.isCommitted()) {
      // invocation in executor's queue
      response.setContentType(MediaType.APPLICATION_JSON);

      // we don't know if developers declared one statusCode in contract
      // so we use cse inner statusCode here
      ((HttpServletResponse) response).setStatus(Status.INTERNAL_SERVER_ERROR.getStatusCode());
      PrintWriter out = response.getWriter();
      out.write(TIMEOUT_MESSAGE);
      response.flushBuffer();
    }

    request.removeAttribute(RestConst.REST_REQUEST);
  }

  LOGGER.error("Rest request timeout committed, method {}, path {}.", requestEx.getMethod(), requestEx.getRequestURI());
}

Source File: SpamFilterTooFreq.java From jivejdon with Apache License 2.0

5 votes

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
	if (!isFilter) {
		chain.doFilter(request, response);
		return;
	}

	HttpServletRequest httpRequest = (HttpServletRequest) request;

	if (!httpRequest.getRequestURI().contains("registerCode"))
		if (!isPermittedRobot(httpRequest)) {
			String path = httpRequest.getServletPath();
			if (numPattern.matcher(path).matches()) {
				int slash = path.lastIndexOf("/");
				String id = path.substring(slash + 1, path.length());
				if (!checkSpamHit(id, httpRequest)) {
					log.warn("spammer,  fetching too frequency:" + httpRequest.getRequestURI() + " remote:" + httpRequest.getRemoteAddr());
					disableSessionOnlines(httpRequest);
					if (!response.isCommitted())
						response.reset();
					HttpServletResponse httpResponse = (HttpServletResponse) response;
					httpResponse.sendError(503);
					return;
				}
			}
		}
	chain.doFilter(request, response);
	return;
}

Source File: SpamFilter.java From jivejdon with Apache License 2.0

5 votes

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
	HttpServletRequest httpRequest = (HttpServletRequest) request;
	if (safeips.contains(request.getRemoteAddr())) {
		chain.doFilter(request, response);
		return;
	}

	if (safeips.size() > 500) {
		safeips.clear();
	}

	if (iPBanListManagerIF == null)
		iPBanListManagerIF = (IPBanListManagerIF) WebAppUtil.getComponentInstance("iPBanListManager", servletContext);

	if (!httpRequest.getRequestURI().contains("registerCode")) {
		if (isSpam(httpRequest)) {
			log.debug("spammer, giving 'em a 503");
			safeips.remove(request.getRemoteAddr());
			disableSessionOnlines(httpRequest);
			if (!response.isCommitted())
				response.reset();
			HttpServletResponse httpResponse = (HttpServletResponse) response;
			httpResponse.sendError(503);
			return;
		}
	}

	safeips.add(request.getRemoteAddr());
	chain.doFilter(request, response);
	return;
}

Source File: HttpHeaderSecurityFilter.java From Tomcat8-Source-Read with MIT License

5 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response,
        FilterChain chain) throws IOException, ServletException {

    if (response instanceof HttpServletResponse) {
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        if (response.isCommitted()) {
            throw new ServletException(sm.getString("httpHeaderSecurityFilter.committed"));
        }

        // HSTS
        if (hstsEnabled && request.isSecure()) {
            httpResponse.setHeader(HSTS_HEADER_NAME, hstsHeaderValue);
        }

        // anti click-jacking
        if (antiClickJackingEnabled) {
            httpResponse.setHeader(ANTI_CLICK_JACKING_HEADER_NAME, antiClickJackingHeaderValue);
        }

        // Block content type sniffing
        if (blockContentTypeSniffingEnabled) {
            httpResponse.setHeader(BLOCK_CONTENT_TYPE_SNIFFING_HEADER_NAME,
                    BLOCK_CONTENT_TYPE_SNIFFING_HEADER_VALUE);
        }

        // cross-site scripting filter protection
        if (xssProtectionEnabled) {
            httpResponse.setHeader(XSS_PROTECTION_HEADER_NAME, XSS_PROTECTION_HEADER_VALUE);
        }
    }

    chain.doFilter(request, response);
}

Source File: JCacheFilter.java From commons-jcs with Apache License 2.0

4 votes

private void checkResponse(final ServletResponse servletResponse)
{
    if (servletResponse.isCommitted()) {
        throw new IllegalStateException("Response committed");
    }
}

Source File: GZipServletFilter.java From para with Apache License 2.0

4 votes

@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
		throws IOException, ServletException {

	HttpServletRequest httpRequest = (HttpServletRequest) request;
	HttpServletResponse httpResponse = (HttpServletResponse) response;

	if (!isIncluded(httpRequest) && acceptsGZipEncoding(httpRequest) && !response.isCommitted()) {
		// Client accepts zipped content
		if (log.isTraceEnabled()) {
			log.trace("{} Written with gzip compression", httpRequest.getRequestURL());
		}

		// Create a gzip stream
		final ByteArrayOutputStream compressed = new ByteArrayOutputStream();
		final GZIPOutputStream gzout = new GZIPOutputStream(compressed);

		// Handle the request
		final GZipServletResponseWrapper wrapper = new GZipServletResponseWrapper(httpResponse, gzout);
		wrapper.setDisableFlushBuffer(true);
		chain.doFilter(request, wrapper);
		wrapper.flush();

		gzout.close();

           // double check one more time before writing out
		// repsonse might have been committed due to error
		if (response.isCommitted()) {
			return;
		}

		// return on these special cases when content is empty or unchanged
		switch (wrapper.getStatus()) {
			case HttpServletResponse.SC_NO_CONTENT:
			case HttpServletResponse.SC_RESET_CONTENT:
			case HttpServletResponse.SC_NOT_MODIFIED:
				return;
			default:
		}

		// Saneness checks
		byte[] compressedBytes = compressed.toByteArray();
		boolean shouldGzippedBodyBeZero = GZipResponseUtil.shouldGzippedBodyBeZero(compressedBytes, httpRequest);
		boolean shouldBodyBeZero = GZipResponseUtil.shouldBodyBeZero(httpRequest, wrapper.getStatus());
		if (shouldGzippedBodyBeZero || shouldBodyBeZero) {
               // No reason to add GZIP headers or write body if no content was written or status code specifies no
			// content
			response.setContentLength(0);
			return;
		}

		// Write the zipped body
		GZipResponseUtil.addGzipHeader(httpResponse);

		// Only write out header Vary as needed
		GZipResponseUtil.addVaryAcceptEncoding(wrapper);

		response.setContentLength(compressedBytes.length);

		response.getOutputStream().write(compressedBytes);
	} else {
		// Client does not accept zipped content - don't bother zipping
		if (log.isTraceEnabled()) {
			log.trace("{} Written without gzip compression because the request does not accept gzip",
					httpRequest.getRequestURL());
		}
		chain.doFilter(request, response);
	}
}

Java Code Examples for javax.servlet.ServletResponse#isCommitted()