Skip to main content
Version: 8.2405.x.x RR

XmlFilter

XmlFilter can be used to validate request bodies containing XML, i.e. to make sure that this xml-content is well-formed.

Classname
ch::nevis::nevisproxy::filter::validation::XmlFilter
Library
libValidationFilters.so.1

Configuration​

BlockOnError​

  • Type: Enum
  • Possible values: on, off, log
  • Usage Constraints: optional, conditional
  • Default: on
  • Newline separated list of conditions, defining whether requests containing malformed xml should be blocked (on), or only logged (log). In case of "off", the request body is not inspected at all by this filter.

StatusCode​

  • Type: Integer
  • Usage Constraints: optional, min: 100, max: 1000
  • Default: 403
  • Defines the response status code of a blocked response.

LoadExternalDocuments​

  • Type: Boolean
  • Usage Constraints: optional
  • Default: false
  • Let the XmlFilter load external documents. If this is set to true, the proxy might do out-calls to the internet or intranet. This might or might not be harmful depending on your firewall setup. Furthermore, the proxy might get malicious DTDs from the internet with possible future flaws in it.

SchemaDirectory​

  • Type: String
  • Usage Constraints: optional
  • Defines the directory where schemas are located.

SchemaCatalog​

  • Type: Newline separated list of strings
  • Usage Constraints: required if a SchemaDirectory is configured
  • Syntax: <systemId>:<filename>
  • Defines the mapping between a systemId and a file inside the configured schema directory. For example: http://www.w3.org/TR/html4/strict.dtd : strict.dtd. It is ignored if no SchemaDirectory is configured.