import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Determine if a URI string has a <code>scheme</code> component.
 */
private boolean hasScheme(String uri) {
    int len = uri.length();
    for(int i=0; i < len ; i++) {
        char c = uri.charAt(i);
        if(c == ':') {
            return i > 0;
        } else if(!URL.isSchemeChar(c)) {
            return false;
        }
    }
    return false;
}
 

import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Determine if a URI string has a <code>scheme</code> component.
 */
protected static boolean hasScheme(StringBuffer uri) {
    int len = uri.length();
    for(int i=0; i < len ; i++) {
        char c = uri.charAt(i);
        if(c == ':') {
            return i > 0;
        } else if(!URL.isSchemeChar(c)) {
            return false;
        }
    }
    return false;
}
 

import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Return <code>true</code> if the specified URL should be encoded with a
 * session identifier. This will be true if all of the following conditions
 * are met:
 * <ul>
 * <li>The request we are responding to asked for a valid session
 * <li>The requested session ID was not received via a cookie
 * <li>The specified URL points back to somewhere within the web application
 * that is responding to this request
 * </ul>
 *
 * @param location
 *            Absolute URL to be validated
 */
protected boolean isEncodeable(final String location) {

	if (location == null) {
		return (false);
	}

	// Is this an intra-document reference?
	if (location.startsWith("#")) {
		return (false);
	}

	// Are we in a valid session that is not using cookies?
	final Request hreq = request;
	final Session session = hreq.getSessionInternal(false);
	if (session == null) {
		return (false);
	}
	if (hreq.isRequestedSessionIdFromCookie()) {
		return (false);
	}

	// Is URL encoding permitted
	if (!hreq.getServletContext().getEffectiveSessionTrackingModes().contains(SessionTrackingMode.URL)) {
		return false;
	}

	if (SecurityUtil.isPackageProtectionEnabled()) {
		return (AccessController.doPrivileged(new PrivilegedAction<Boolean>() {

			@Override
			public Boolean run() {
				return Boolean.valueOf(doIsEncodeable(hreq, session, location));
			}
		})).booleanValue();
	} else {
		return doIsEncodeable(hreq, session, location);
	}
}
 

import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Determine if a URI string has a <code>scheme</code> component.
 */
private boolean hasScheme(String uri) {
	int len = uri.length();
	for (int i = 0; i < len; i++) {
		char c = uri.charAt(i);
		if (c == ':') {
			return i > 0;
		} else if (!URL.isSchemeChar(c)) {
			return false;
		}
	}
	return false;
}
 

import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Return <code>true</code> if the specified URL should be encoded with
 * a session identifier.  This will be true if all of the following
 * conditions are met:
 * <ul>
 * <li>The request we are responding to asked for a valid session
 * <li>The requested session ID was not received via a cookie
 * <li>The specified URL points back to somewhere within the web
 *     application that is responding to this request
 * </ul>
 *
 * @param location Absolute URL to be validated
 */
protected boolean isEncodeable(final String location) {

    if (location == null)
        return (false);

    // Is this an intra-document reference?
    if (location.startsWith("#"))
        return (false);

    // Are we in a valid session that is not using cookies?
    final Request hreq = request;
    final Session session = hreq.getSessionInternal(false);
    if (session == null)
        return (false);
    if (hreq.isRequestedSessionIdFromCookie())
        return (false);
    
    // Is URL encoding permitted
    if (!hreq.getServletContext().getEffectiveSessionTrackingModes().
            contains(SessionTrackingMode.URL))
        return false;

    if (SecurityUtil.isPackageProtectionEnabled()) {
        return (
            AccessController.doPrivileged(new PrivilegedAction<Boolean>() {

            @Override
            public Boolean run(){
                return Boolean.valueOf(doIsEncodeable(hreq, session, location));
            }
        })).booleanValue();
    } else {
        return doIsEncodeable(hreq, session, location);
    }
}
 

import org.apache.tomcat.util.net.URL; //导入依赖的package包/类
/**
 * Return <code>true</code> if the specified URL should be encoded with
 * a session identifier.  This will be true if all of the following
 * conditions are met:
 * <ul>
 * <li>The request we are responding to asked for a valid session
 * <li>The requested session ID was not received via a cookie
 * <li>The specified URL points back to somewhere within the web
 *     application that is responding to this request
 * </ul>
 *
 * @param location Absolute URL to be validated
 */
protected boolean isEncodeable(final String location) {

    if (location == null) {
        return (false);
    }

    // Is this an intra-document reference?
    if (location.startsWith("#")) {
        return (false);
    }

    // Are we in a valid session that is not using cookies?
    final Request hreq = request;
    final Session session = hreq.getSessionInternal(false);
    if (session == null) {
        return (false);
    }
    if (hreq.isRequestedSessionIdFromCookie()) {
        return (false);
    }

    // Is URL encoding permitted
    if (!hreq.getServletContext().getEffectiveSessionTrackingModes().
            contains(SessionTrackingMode.URL)) {
        return false;
    }

    if (SecurityUtil.isPackageProtectionEnabled()) {
        return (
            AccessController.doPrivileged(new PrivilegedAction<Boolean>() {

            @Override
            public Boolean run(){
                return Boolean.valueOf(doIsEncodeable(hreq, session, location));
            }
        })).booleanValue();
    } else {
        return doIsEncodeable(hreq, session, location);
    }
}