anchor.diff:          </cfscript>
   	</cffunction>
   
  -	<!--- getHeaderNames --->
  -	<!--- getHeaders --->
  -	<!--- getInputStream --->
  -	<!--- getIntHeader --->
  +
  +	<cffunction access="public" returntype="Array" name="getHeaderNames" output="false" hint="Returns the enumeration of header names from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  +		<cfscript>
  +	        local.v = [];
  +	        local.en = getHttpServletRequest().getHeaderNames();
  +	        while (local.en.hasMoreElements()) {
  +	            try {
  +	                local.name = local.en.nextElement();
  +	                local.clean = instance.ESAPI.validator().getValidInput("HTTP header name: " & local.name, local.name, "HTTPHeaderName", 150, true);
  +	                local.v.add(local.clean);
  +	            } catch (cfesapi.org.owasp.esapi.errors.ValidationException e) {
  +	                // already logged
  +	            }
  +	        }
  +	        return local.v;
  +    	</cfscript>
  +	</cffunction>
  +
  +
  +	<cffunction access="public" returntype="Array" name="getHeaders" output="false" hint="Returns the enumeration of headers from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  +		<cfargument type="String" name="name" required="true" hint="The name of an HTTP request header.">
  +		<cfscript>
  +	        local.v = [];
  +	        local.en = getHttpServletRequest().getHeaders(arguments.name);
  +	        while (local.en.hasMoreElements()) {
  +	            try {
  +	                local.value = local.en.nextElement();
  +	                local.clean = instance.ESAPI.validator().getValidInput("HTTP header value (" & arguments.name & "): " & local.value, local.value, "HTTPHeaderValue", 150, true);
  +	                local.v.add(local.clean);
  +	            } catch (cfesapi.org.owasp.esapi.errors.ValidationException e) {
  +	                // already logged
  +	            }
  +	        }
  +	        return local.v;
  +    	</cfscript>
  +	</cffunction>
  +
  +
  +	<cffunction access="public" returntype="any" name="getInputStream" output="false" hint="The javax.servlet.ServletInputStream associated with this HttpServletRequest. Note that this input stream may contain attacks and the developer is responsible for canonicalizing, validating, and encoding any data from this stream.">
  +		<cfscript>
  +        	return getHttpServletRequest().getInputStream();
  +    	</cfscript>
  +	</cffunction>
  +
  +
  +	<cffunction access="public" returntype="numeric" name="getIntHeader" output="false" hint="Returns the value of the specified request header as an int.">
  +		<cfargument type="String" name="name" required="true" hint="The name of an HTTP request header.">
  +		<cfscript>
  +        	return getHttpServletRequest().getIntHeader(arguments.name);
  +    	</cfscript>
  +	</cffunction>
  +
   
   	<cffunction access="public" returntype="String" name="getLocalAddr" output="false" hint="A String containing the IP address on which the request was received.">
   		<cfscript>
  
positive.code:         </cfscript>
  	</cffunction>
  
  	<!--- getRemoteUser --->
  
  	<cffunction access="public" returntype="any" name="getRequestDispatcher" output="false" hint="java.servlet.RequestDispatcher: Checks to make sure the path to forward to is within the WEB-INF directory and then returns the dispatcher. Otherwise returns null.">
  		<cfargument type="String" name="path" required="true" hint="The path to create a request dispatcher for">
  
negative.code:         </cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="Array" name="getAttributeNames" output="false" hint="An Enumeration of attribute names.">
  		<cfscript>
          	return getHttpServletRequest().getAttributeNames();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getAuthType" output="false" hint="The authentication type">
  		<cfscript>
          	return getHttpServletRequest().getAuthType();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getCharacterEncoding" output="false" hint="The character-encoding for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getCharacterEncoding();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="numeric" name="getContentLength" output="false" hint="The content-length for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getContentLength();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getContentType" output="false" hint="The content-type for this HttpServletRequest">
  		<cfscript>
          	return getHttpServletRequest().getContentType();
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="String" name="getContextPath" output="false" hint="Returns the context path from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  		<cfscript>
  	        local.path = getHttpServletRequest().getContextPath();
  	        local.clean = "";
  	        try {
  	            local.clean = instance.ESAPI.validator().getValidInput("HTTP context path: " & local.path, local.path, "HTTPContextPath", 150, false);
  	        } catch (cfesapi.org.owasp.esapi.errors.ValidationException e) {
  	            // already logged
  	        }
  	        return local.clean;
      	</cfscript>
  	</cffunction>
  
  
  	<cffunction access="public" returntype="Array" name="getCookies" output="false" hint="Returns the array of Cookies from the HttpServletRequest after canonicalizing and filtering out any dangerous characters.">
  		<cfscript>
  