java - Can client side code access or set http request attributes? -


i'm reasonably confident know answer this, struggling find concrete information out there. i'm aware client submits requests http server optionally supplying reqeust parameters. server has additional capability store information in request attributes via objects. question is, client have access attributes in http request object? have lot of poorly written code looks this:

if (request.getattribute("name") != null)     name = request.getattribute("name); else if (request.getparameter("name") != null)     name = request.getparameter("name"); 

i'm guess because original developer didn't understand how client side http requests submitted data server. in case, i'm working on implementing additional valiadation , encoding of request data prevent xss vulnerabilities , wondered if possible client corrupt/hack/take advantage of request attributes (assuming aren't ever populated data sourced client)?

no. attributes servlet spec adds, , can used communicate between different entities operating on request. don't travel on wire, don't exist client side.

the client can set body, parameters (i.e. url) , headers, , that's pretty it.

see:


Popular posts from this blog

How to calculate SNR of signals in MATLAB? -

c# - Attempting to upload to FTP: System.Net.WebException: System error -

ios - UISlider customization: how to properly add shadow to custom knob image -