Package burp.mcp.util

Class InputValidator

java.lang.Object

burp.mcp.util.InputValidator

public final class InputValidator
extends Object

Input validation for MCP tool parameters. Validates URLs, file paths, cookie values, and custom data against injection and format attacks.

Method Summary

Modifier and Type	Method	Description
static String	validateCookieValue(String value, String paramName)	Validates a cookie name or value: no CR/LF, max 4096 chars.
static String	validateCustomData(String data, String paramName)	Validates Collaborator custom data: max 16 alphanumeric chars.
static String	validateFilePath(String path, String paramName)	Validates a file path: no .. traversal, no null bytes.
static String	validateUrl(String url, String paramName)	Validates a URL: must start with http:// or https://, max 2048 chars, no null bytes, no CR/LF injection.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

validateUrl

public static String validateUrl(String url,
 String paramName)

Validates a URL: must start with http:// or https://, max 2048 chars, no null bytes, no CR/LF injection. Returns null if valid, or an error message.

validateFilePath

public static String validateFilePath(String path,
 String paramName)

Validates a file path: no .. traversal, no null bytes. Returns null if valid, or an error message.

validateCookieValue

public static String validateCookieValue(String value,
 String paramName)

Validates a cookie name or value: no CR/LF, max 4096 chars.

validateCustomData

public static String validateCustomData(String data,
 String paramName)

Validates Collaborator custom data: max 16 alphanumeric chars.