| setAllowUrlEncodedPercent(boolean) |  | 0% | | 0% | 2 | 2 | 6 | 6 | 1 | 1 |
| setAllowedHttpMethods(Collection) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedPeriod(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedParagraphSeparator(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedLineSeparator(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| urlBlocklistsRemoveAll(Collection) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| setAllowSemicolon(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedSlash(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedDoubleSlash(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowBackSlash(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowNull(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedCarriageReturn(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setAllowUrlEncodedLineFeed(boolean) | | 0% | | 0% | 2 | 2 | 4 | 4 | 1 | 1 |
| setUnsafeAllowAnyHttpMethod(boolean) | | 0% | | 0% | 2 | 2 | 2 | 2 | 1 | 1 |
| setAllowedHeaderNames(Predicate) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| setAllowedHeaderValues(Predicate) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| setAllowedParameterNames(Predicate) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| setAllowedParameterValues(Predicate) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| setAllowedHostnames(Predicate) | | 0% | | n/a | 1 | 1 | 3 | 3 | 1 | 1 |
| rejectedUntrustedHosts(HttpServletRequest) |  | 64% | | 50% | 2 | 3 | 1 | 4 | 0 | 1 |
| getFirewalledResponse(HttpServletResponse) | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| getDecodedUrlBlocklist() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| getEncodedUrlBlacklist() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| getDecodedUrlBlacklist() | | 0% | | n/a | 1 | 1 | 1 | 1 | 1 | 1 |
| containsOnlyPrintableAsciiCharacters(String) | | 92% | | 87% | 1 | 5 | 1 | 8 | 0 | 1 |
| rejectForbiddenHttpMethod(HttpServletRequest) | | 95% | | 75% | 1 | 3 | 1 | 6 | 0 | 1 |
| static {...} | | 100% | | n/a | 0 | 1 | 0 | 26 | 0 | 1 |
| StrictHttpFirewall() | | 100% | | n/a | 0 | 1 | 0 | 22 | 0 | 1 |
| isNormalized(String) | | 100% | | 100% | 0 | 8 | 0 | 12 | 0 | 1 |
| rejectedBlocklistedUrls(HttpServletRequest) | | 100% | | 100% | 0 | 5 | 0 | 9 | 0 | 1 |
| createDefaultAllowedHttpMethods() | | 100% | | n/a | 0 | 1 | 0 | 9 | 0 | 1 |
| getFirewalledRequest(HttpServletRequest) | | 100% | | 100% | 0 | 2 | 0 | 7 | 0 | 1 |
| isNormalized(HttpServletRequest) | | 100% | | 100% | 0 | 5 | 0 | 9 | 0 | 1 |
| rejectNonPrintableAsciiCharactersInFieldName(String, String) | | 100% | | 100% | 0 | 2 | 0 | 4 | 0 | 1 |
| encodedUrlContains(HttpServletRequest, String) | | 100% | | 100% | 0 | 2 | 0 | 3 | 0 | 1 |
| decodedUrlContains(HttpServletRequest, String) | | 100% | | 100% | 0 | 2 | 0 | 3 | 0 | 1 |
| urlBlocklistsAddAll(Collection) | | 100% | | n/a | 0 | 1 | 0 | 3 | 0 | 1 |
| valueContains(String, String) | | 100% | | 100% | 0 | 3 | 0 | 1 | 0 | 1 |
| lambda$static$2(String) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| lambda$static$1(String) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| getEncodedUrlBlocklist() | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| lambda$static$3(String) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |
| lambda$new$0(String) | | 100% | | n/a | 0 | 1 | 0 | 1 | 0 | 1 |