[Advanced-java] Sensitive Data -> String getParameter(String)Alternative

[Nikolaos Giannopoulos]

Jukka,

Thanks for the *code* reply but I'm not sure that it answers my question.

What I am looking for is a way - in a servlet - to get the value of a HTTP
POSTed request parameter without having to use the following code:

String cardNumber = req.getParameter("card_number");

rather I'm looking for something like:

char[] cardNumber = getXXXX(req, "card_number");

where getXXXX does NOT EVER grab the value of card number as a String
object.

I imagine I'm going to need to read the servlet http request headers or
something thereof.  Any ideas anyone??????

--Nikolaos


> -----Original Message-----
> From: Jukka Sundberg [mailto:jukka@citrus.fi]
> Sent: Friday, May 02, 2003 6:17 AM
> To: nikolaos@solmar.ca
> Cc: advanced-java@lists.xcf.berkeley.edu
> Subject: Re: [Advanced-java] Sensitive Data -> String
> getParameter(String)Alternative
>
>
> I dont't know if you have already solved your problem, but here is one
> solution in zip file.
>
> Nikolaos Giannopoulos wrote:
> > We have an e-commerce app that has credit card info HTTP POSTed
> to it (over
> > SSL using https).  The problem is that we currently use
> > getParameter("card_number") to get say the credit card number BUT this
> > method returns a String.
> >
> > Does anyone know how to go about getting HTTP POSTed data (to a
> servlet) as
> > a char[] without having it first converted into a String?
> >
> > --Nikolaos
> >
> >
> > _______________________________________________
> > Advanced-java mailing list
> > Advanced-java@lists.xcf.berkeley.edu
> > http://lists.xcf.berkeley.edu/mailman/listinfo/advanced-java
>
>