org.broadleafcommerce.core.web.processor

Class FormProcessor

java.lang.Object

org.thymeleaf.processor.AbstractProcessor

org.thymeleaf.processor.element.AbstractElementProcessor

org.broadleafcommerce.core.web.processor.FormProcessor

All Implemented Interfaces:

Comparable<org.thymeleaf.processor.IProcessor>, org.thymeleaf.processor.IProcessor

@Component(value="blFormProcessor")
public class FormProcessor
extends org.thymeleaf.processor.element.AbstractElementProcessor

Used as a replacement to the HTML <form> element which adds a CSRF token input field to forms that are submitted via anything but GET. This is required to properly bypass the CsrfFilter.

Author:

apazzolini

See Also:

CsrfFilter}

Field Summary

Fields

Modifier and Type	Field and Description
protected org.broadleafcommerce.common.security.service.ExploitProtectionService	eps

Constructor Summary

Constructors

Constructor and Description
FormProcessor() Sets the name of this processor to be used in Thymeleaf template

Method Summary

Methods

Modifier and Type	Method and Description
int	getPrecedence() We need this replacement to execute as early as possible to allow subsequent processors to act on this element as if it were a normal form instead of a blc:form
protected org.thymeleaf.processor.ProcessorResult	processElement(org.thymeleaf.Arguments arguments, org.thymeleaf.dom.Element element)

Methods inherited from class org.thymeleaf.processor.element.AbstractElementProcessor

doProcess, getMatcher

Methods inherited from class org.thymeleaf.processor.AbstractProcessor

compareTo, getMessage, getMessageForProcessor, getMessageForTemplate, process

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

eps

protected org.broadleafcommerce.common.security.service.ExploitProtectionService eps

Constructor Detail

FormProcessor

public FormProcessor()

Sets the name of this processor to be used in Thymeleaf template

Method Detail

getPrecedence

public int getPrecedence()

We need this replacement to execute as early as possible to allow subsequent processors to act on this element as if it were a normal form instead of a blc:form

Specified by:

getPrecedence in class org.thymeleaf.processor.AbstractProcessor

processElement

protected org.thymeleaf.processor.ProcessorResult processElement(org.thymeleaf.Arguments arguments,
                                                     org.thymeleaf.dom.Element element)

Specified by:

processElement in class org.thymeleaf.processor.element.AbstractElementProcessor