com.coverity.security/coverity-escapers/1.1.1 : com/coverity/security/Filter.class

Filter
http://coverity.com/security: Open source library of HTML, JavaScript, and CSS escapers for use by Java applications
BSD style modified by Coverity
Romain Gaucher
Andy Chou
Jon Passki
Alex Kouzemtchenko
public class com.coverity.security.Filter
  minor version: 0
  major version: 59
  flags: flags: (0x0021) ACC_PUBLIC, ACC_SUPER
  this_class: com.coverity.security.Filter
  super_class: java.lang.Object
{
  private static final java.util.regex.Pattern OCTAL_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern NUMBER_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern HEX_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern CSS_HEX_COLOR_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern CSS_NAMED_COLOR_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern URL_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  private static final java.util.regex.Pattern SCHEME_REGEX;
    descriptor: Ljava/util/regex/Pattern;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=2, locals=0, args_size=0
         0: .line 54
            ldc "(0+)([0-7]*)"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.OCTAL_REGEX:Ljava/util/regex/Pattern;
         1: .line 55
            ldc "[-+]?((\\.[0-9]+)|([0-9]+\\.?[0-9]*))"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.NUMBER_REGEX:Ljava/util/regex/Pattern;
         2: .line 56
            ldc "0x[0-9a-fA-F]+"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.HEX_REGEX:Ljava/util/regex/Pattern;
         3: .line 101
            ldc "#[0-9a-fA-F]{3}([0-9a-fA-F]{3})?"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.CSS_HEX_COLOR_REGEX:Ljava/util/regex/Pattern;
         4: .line 102
            ldc "[a-zA-Z]{1,20}"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.CSS_NAMED_COLOR_REGEX:Ljava/util/regex/Pattern;
         5: .line 154
            ldc "(/|\\\\\\\\|https?:|ftp:|mailto:).*"
            iconst_2
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;I)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.URL_REGEX:Ljava/util/regex/Pattern;
         6: .line 278
            ldc "(javascript|vbscript|data|about)"
            invokestatic java.util.regex.Pattern.compile:(Ljava/lang/String;)Ljava/util/regex/Pattern;
            putstatic com.coverity.security.Filter.SCHEME_REGEX:Ljava/util/regex/Pattern;
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  public void <init>();
    descriptor: ()V
    flags: (0x0001) ACC_PUBLIC
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // com.coverity.security.Filter this
         0: .line 52
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
            return
        end local 0 // com.coverity.security.Filter this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    1     0  this  Lcom/coverity/security/Filter;

  public static java.lang.String asNumber(java.lang.String);
    descriptor: (Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.lang.String number
         0: .line 74
            aload 0 /* number */
            ldc "0"
            invokestatic com.coverity.security.Filter.asNumber:(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
            areturn
        end local 0 // java.lang.String number
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    1     0  number  Ljava/lang/String;
    MethodParameters:
        Name  Flags
      number  

  public static java.lang.String asNumber(java.lang.String, java.lang.String);
    descriptor: (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=2, locals=4, args_size=2
        start local 0 // java.lang.String number
        start local 1 // java.lang.String defaultNumber
         0: .line 85
            aload 0 /* number */
            ifnonnull 2
         1: .line 86
            aconst_null
            areturn
         2: .line 87
      StackMap locals:
      StackMap stack:
            aload 0 /* number */
            invokevirtual java.lang.String.trim:()Ljava/lang/String;
            astore 2 /* trimNumber */
        start local 2 // java.lang.String trimNumber
         3: .line 90
            getstatic com.coverity.security.Filter.OCTAL_REGEX:Ljava/util/regex/Pattern;
            aload 2 /* trimNumber */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            astore 3 /* octal */
        start local 3 // java.util.regex.Matcher octal
         4: .line 91
            aload 3 /* octal */
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 6
         5: .line 92
            aload 3 /* octal */
            iconst_2
            invokevirtual java.util.regex.Matcher.group:(I)Ljava/lang/String;
            areturn
         6: .line 94
      StackMap locals: java.lang.String java.util.regex.Matcher
      StackMap stack:
            getstatic com.coverity.security.Filter.NUMBER_REGEX:Ljava/util/regex/Pattern;
            aload 2 /* trimNumber */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 8
         7: .line 95
            aload 2 /* trimNumber */
            areturn
         8: .line 96
      StackMap locals:
      StackMap stack:
            getstatic com.coverity.security.Filter.HEX_REGEX:Ljava/util/regex/Pattern;
            aload 2 /* trimNumber */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 10
         9: .line 97
            aload 2 /* trimNumber */
            areturn
        10: .line 98
      StackMap locals:
      StackMap stack:
            aload 1 /* defaultNumber */
            areturn
        end local 3 // java.util.regex.Matcher octal
        end local 2 // java.lang.String trimNumber
        end local 1 // java.lang.String defaultNumber
        end local 0 // java.lang.String number
      LocalVariableTable:
        Start  End  Slot           Name  Signature
            0   11     0         number  Ljava/lang/String;
            0   11     1  defaultNumber  Ljava/lang/String;
            3   11     2     trimNumber  Ljava/lang/String;
            4   11     3          octal  Ljava/util/regex/Matcher;
    MethodParameters:
               Name  Flags
      number         
      defaultNumber  

  public static java.lang.String asCssColor(java.lang.String);
    descriptor: (Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.lang.String color
         0: .line 133
            aload 0 /* color */
            ldc "invalid"
            invokestatic com.coverity.security.Filter.asCssColor:(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
            areturn
        end local 0 // java.lang.String color
      LocalVariableTable:
        Start  End  Slot   Name  Signature
            0    1     0  color  Ljava/lang/String;
    MethodParameters:
       Name  Flags
      color  

  public static java.lang.String asCssColor(java.lang.String, java.lang.String);
    descriptor: (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=2, locals=2, args_size=2
        start local 0 // java.lang.String color
        start local 1 // java.lang.String defaultColor
         0: .line 144
            aload 0 /* color */
            ifnonnull 2
         1: .line 145
            aconst_null
            areturn
         2: .line 146
      StackMap locals:
      StackMap stack:
            getstatic com.coverity.security.Filter.CSS_HEX_COLOR_REGEX:Ljava/util/regex/Pattern;
            aload 0 /* color */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 4
         3: .line 147
            aload 0 /* color */
            areturn
         4: .line 148
      StackMap locals:
      StackMap stack:
            getstatic com.coverity.security.Filter.CSS_NAMED_COLOR_REGEX:Ljava/util/regex/Pattern;
            aload 0 /* color */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 6
         5: .line 149
            aload 0 /* color */
            areturn
         6: .line 151
      StackMap locals:
      StackMap stack:
            aload 1 /* defaultColor */
            areturn
        end local 1 // java.lang.String defaultColor
        end local 0 // java.lang.String color
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0    7     0         color  Ljava/lang/String;
            0    7     1  defaultColor  Ljava/lang/String;
    MethodParameters:
              Name  Flags
      color         
      defaultColor  

  public static java.lang.String asURL(java.lang.String);
    descriptor: (Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=3, locals=1, args_size=1
        start local 0 // java.lang.String url
         0: .line 196
            aload 0 /* url */
            ifnonnull 2
         1: .line 197
            aconst_null
            areturn
         2: .line 200
      StackMap locals:
      StackMap stack:
            aload 0 /* url */
            invokevirtual java.lang.String.length:()I
            ifne 4
         3: .line 201
            aload 0 /* url */
            areturn
         4: .line 204
      StackMap locals:
      StackMap stack:
            getstatic com.coverity.security.Filter.URL_REGEX:Ljava/util/regex/Pattern;
            aload 0 /* url */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 6
         5: .line 205
            aload 0 /* url */
            areturn
         6: .line 209
      StackMap locals:
      StackMap stack:
            new java.lang.StringBuilder
            dup
            ldc "./"
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* url */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            areturn
        end local 0 // java.lang.String url
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    7     0   url  Ljava/lang/String;
    MethodParameters:
      Name  Flags
      url   

  public static java.lang.String asFlexibleURL(java.lang.String);
    descriptor: (Ljava/lang/String;)Ljava/lang/String;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=3, locals=4, args_size=1
        start local 0 // java.lang.String url
         0: .line 229
            aload 0 /* url */
            ifnonnull 2
         1: .line 230
            aconst_null
            areturn
         2: .line 233
      StackMap locals:
      StackMap stack:
            iconst_0
            istore 1 /* i */
        start local 1 // int i
         3: .line 234
            aload 0 /* url */
            invokevirtual java.lang.String.length:()I
            istore 2 /* length */
        start local 2 // int length
         4: .line 238
            aload 0 /* url */
            ldc "/"
            invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
            ifeq 6
         5: .line 239
            aload 0 /* url */
            areturn
         6: .line 243
      StackMap locals: int int
      StackMap stack:
            aload 0 /* url */
            ldc "\\\\"
            invokevirtual java.lang.String.startsWith:(Ljava/lang/String;)Z
            ifeq 16
         7: .line 244
            aload 0 /* url */
            areturn
         8: .line 249
      StackMap locals:
      StackMap stack:
            aload 0 /* url */
            iload 1 /* i */
            invokevirtual java.lang.String.charAt:(I)C
            istore 3 /* c */
        start local 3 // char c
         9: .line 253
            iload 3 /* c */
            bipush 97
            if_icmplt 10
            iload 3 /* c */
            bipush 122
            if_icmple 15
      StackMap locals: int
      StackMap stack:
        10: iload 3 /* c */
            bipush 65
            if_icmplt 11
            iload 3 /* c */
            bipush 90
            if_icmple 15
        11: .line 254
      StackMap locals:
      StackMap stack:
            iload 3 /* c */
            bipush 48
            if_icmplt 12
            iload 3 /* c */
            bipush 57
            if_icmple 15
      StackMap locals:
      StackMap stack:
        12: iload 3 /* c */
            bipush 46
            if_icmpeq 15
            iload 3 /* c */
            bipush 43
            if_icmpeq 15
        13: .line 255
            iload 3 /* c */
            bipush 45
            if_icmpeq 15
        14: .line 257
            goto 17
        end local 3 // char c
        15: .line 248
      StackMap locals:
      StackMap stack:
            iinc 1 /* i */ 1
      StackMap locals:
      StackMap stack:
        16: iload 1 /* i */
            iload 2 /* length */
            if_icmplt 8
        17: .line 263
      StackMap locals:
      StackMap stack:
            iload 1 /* i */
            iload 2 /* length */
            if_icmpne 19
        18: .line 265
            aload 0 /* url */
            areturn
        19: .line 268
      StackMap locals:
      StackMap stack:
            aload 0 /* url */
            iload 1 /* i */
            invokevirtual java.lang.String.charAt:(I)C
            bipush 58
            if_icmpne 21
            aload 0 /* url */
            iconst_0
            iload 1 /* i */
            invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
            invokevirtual java.lang.String.toLowerCase:()Ljava/lang/String;
            invokestatic com.coverity.security.Filter.validateScheme:(Ljava/lang/String;)Z
            ifeq 21
        20: .line 271
            aload 0 /* url */
            areturn
        21: .line 275
      StackMap locals:
      StackMap stack:
            new java.lang.StringBuilder
            dup
            ldc "./"
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 0 /* url */
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            areturn
        end local 2 // int length
        end local 1 // int i
        end local 0 // java.lang.String url
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0   22     0     url  Ljava/lang/String;
            3   22     1       i  I
            4   22     2  length  I
            9   15     3       c  C
    MethodParameters:
      Name  Flags
      url   

  private static boolean validateScheme(java.lang.String);
    descriptor: (Ljava/lang/String;)Z
    flags: (0x000a) ACC_PRIVATE, ACC_STATIC
    Code:
      stack=2, locals=1, args_size=1
        start local 0 // java.lang.String scheme
         0: .line 281
            getstatic com.coverity.security.Filter.SCHEME_REGEX:Ljava/util/regex/Pattern;
            aload 0 /* scheme */
            invokevirtual java.util.regex.Pattern.matcher:(Ljava/lang/CharSequence;)Ljava/util/regex/Matcher;
            invokevirtual java.util.regex.Matcher.matches:()Z
            ifeq 1
            iconst_0
            goto 2
      StackMap locals:
      StackMap stack:
         1: iconst_1
      StackMap locals:
      StackMap stack: int
         2: ireturn
        end local 0 // java.lang.String scheme
      LocalVariableTable:
        Start  End  Slot    Name  Signature
            0    3     0  scheme  Ljava/lang/String;
    MethodParameters:
        Name  Flags
      scheme  
}
SourceFile: "Filter.java"
/

com.coverity.security/ coverity-escapers/ 1.1.1/ com/coverity/security/Filter.class
