Bypassing data validation for an URI
By default, data validation is enabled on all input requests.
You can, however, bypass data validation on input requests for some specific Universal Resource Indicators (URIs) by adding a bypass URI as context parameters in the module configuration file.
To bypass data validation, in the web.xml file located in the <INSTALL_DIRruntime_sandbox>/repository/eardata/smcfs/extn/ directory, add an entry for the config-param element for each such URI, for example:
<context-param>
<param-name>request.validation.bypass.uri.1</param-name>
<param-value>/console/login.jsp</param-value>
</context-param>
<context-param>
<param-name>request.validation.bypass.uri.2</param-name>
<param-value>/console/start.jsp</param-value>
</context-param>
<context-param>
<param-name>request.validation.bypass.uri.endswith.1</param-name>
<param-value>.js</param-value>
</context-param>
<context-param>
<param-name> request.validation.bypass.uri.regex.1</param-name>
<param-value>^.*test.jsp$</param-value>
</context-param>
These context parameters can have names starting with request.validation.bypass.uri, or request.validation.bypass.uri.endswith, or request.validation.bypass.uri.regex , as described in the following list. You can define multiple entries for these context parameters.
- request.validation.bypass.uri—Any request with an URI that is the same as the value specified in the param-value element of the context parameter will be bypassed and not validated.
- request.validation.bypass.uri.endswith—Any request with an URI that ends with the value specified in the param-value element of the context parameter will be bypassed and not validated.
- request.validation.bypass.uri.regex—Any URI request that matches the regular expression, as specified in the param-value element of the context parameter, will be bypassed and not validated.