FuseGuard Logo

fuseguard.components.filters
Component SessionHijackingFilter

filters.BaseFilter
  |
  +--filters.SessionHijackingFilter

Detects if a Session Changes User Agent

Method Summary
public array getConfigurables()
          Returns a list of configurable properties
public string getDescription()
public string getName()
public string getThreatCategory()
          Returns session-hijacking
public numeric inspectRequest()
public void invalidateSession()
          Destroys the current session
public void resetFilter()
          Resets the current session user agent
public void setAddSessionIdToLogDetail(boolean enable)
          When true it adds the CFID, CFTOKEN, and JSESSIONID (if enabled) to the log message detail. False by default.

Methods inherited from filters.BaseFilter
inspectsCookieScope, logEnabled, inspectsFormScope, inspectsRequestBody, setFilterWhitelist, setFilterInstanceName, getFilterLevel, getLogLevel, setScopes, getRequestLogMessage, allowURI, inspectsURI, ignoreURI, inspectsRequest, inspectsCGIScope, setIgnoreVariableList, getHelp, getRequestLogMessageDetail, setAllowDenyOrder, getIPWhiteListID, setRequestLogMessage, init, setFilterLevel, filterRequest, blockEnabled, getFilterID, inspectsUrlScope, inspectVariable, getFirewall, setAllowURIList, filterEnabled, filterVariables, logOnly, getFilterInstanceName, getFilterComponent, getIPWhiteListProvider, setIgnoreURIList, setFilterID, getBlockLevel, ignoreVariable, denyURI, inspectResponse, hasIPWhiteList, setLogLevel, inspectVariables, setBlockLevel, ignoresVariable
 

Method Detail

getConfigurables

public array getConfigurables()
Returns a list of configurable properties


getDescription

public string getDescription()

getName

public string getName()

getThreatCategory

public string getThreatCategory()
Returns session-hijacking


inspectRequest

public numeric inspectRequest()

invalidateSession

public void invalidateSession()
Destroys the current session


resetFilter

public void resetFilter()
Resets the current session user agent


setAddSessionIdToLogDetail

public void setAddSessionIdToLogDetail(boolean enable)
When true it adds the CFID, CFTOKEN, and JSESSIONID (if enabled) to the log message detail. False by default.

Parameters:
boolean enable