net.i2p.router.web

Class HostCheckHandler

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.component.ContainerLifeCycle

org.eclipse.jetty.server.handler.AbstractHandler

org.eclipse.jetty.server.handler.AbstractHandlerContainer

org.eclipse.jetty.server.handler.HandlerWrapper

org.eclipse.jetty.servlets.gzip.GzipHandler

net.i2p.router.web.HostCheckHandler

All Implemented Interfaces:

Handler, HandlerContainer, Container, Destroyable, Dumpable, LifeCycle

public class HostCheckHandler
extends GzipHandler

Block certain Host headers to prevent DNS rebinding attacks. This Handler wraps the ContextHandlerCollection, which handles all the webapps (not just routerconsole). Therefore, this protects all the webapps.

Since:

0.9.32

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle

LifeCycle.Listener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.Container

Container.InheritedListener, Container.Listener

Field Summary

Fields inherited from class org.eclipse.jetty.servlets.gzip.GzipHandler

_bufferSize, _minGzipSize, _vary

Fields inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

_handler

Fields inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOPPED, STOPPING

Constructor Summary

Constructors

Constructor and Description
HostCheckHandler(I2PAppContext ctx) MUST call setListenHosts() afterwards.

Method Summary

Modifier and Type	Method and Description
void	handle(String pathInContext, Request baseRequest, HttpServletRequest httpRequest, HttpServletResponse httpResponse) Block by Host header, redirect HTTP to HTTPS, pass everything else to the delegate.
void	setListenHosts(Set<String> hosts) Set the legal hosts.

Methods inherited from class org.eclipse.jetty.servlets.gzip.GzipHandler

addExcludedAgentPatterns, addExcludedMethods, addExcludedMimeTypes, addExcludedPaths, addIncludedAgentPatterns, addIncludedMethods, addIncludedMimeTypes, addIncludedPaths, doStart, getBufferSize, getExcluded, getExcludedAgentPatterns, getExcludedMethods, getExcludedMimeTypes, getExcludedPaths, getIncludedAgentPatterns, getIncludedMethods, getIncludedMimeTypes, getIncludedPaths, getMimeTypes, getMinGzipSize, getVary, newGzipResponseWrapper, newWriter, setBufferSize, setExcluded, setExcluded, setExcludeMimeTypes, setMimeTypes, setMimeTypes, setMinGzipSize, setVary

Methods inherited from class org.eclipse.jetty.server.handler.HandlerWrapper

destroy, expandChildren, getHandler, getHandlers, setHandler, setServer

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandlerContainer

expandHandler, findContainerOf, getChildHandlerByClass, getChildHandlers, getChildHandlersByClass

Methods inherited from class org.eclipse.jetty.server.handler.AbstractHandler

doStop, dumpThis, getServer

Methods inherited from class org.eclipse.jetty.util.component.ContainerLifeCycle

addBean, addBean, addBean, addEventListener, addManaged, contains, dump, dump, dump, dump, dump, dumpBeans, dumpObject, dumpStdErr, getBean, getBeans, getBeans, isManaged, manage, removeBean, removeBeans, removeEventListener, setBeans, setStopTimeout, start, stop, unmanage, updateBean, updateBeans

Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.eclipse.jetty.util.component.LifeCycle

addLifeCycleListener, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop

Constructor Detail

HostCheckHandler

public HostCheckHandler(I2PAppContext ctx)

MUST call setListenHosts() afterwards.

Method Detail

setListenHosts

public void setListenHosts(Set<String> hosts)

Set the legal hosts. Not synched. Call this BEFORE starting. If empty, all are allowed.

Parameters:

hosts - contains hostnames or IPs. But we allow all IPs anyway.

handle

public void handle(String pathInContext,
                   Request baseRequest,
                   HttpServletRequest httpRequest,
                   HttpServletResponse httpResponse)
            throws IOException,
                   ServletException

Block by Host header, redirect HTTP to HTTPS, pass everything else to the delegate.

Specified by:

handle in interface Handler

Overrides:

handle in class GzipHandler

Throws:

IOException

ServletException