Package org.uberfire.ext.security.server

Class SecureHeadersFilter

java.lang.Object

org.uberfire.ext.security.server.SecureHeadersFilter

All Implemented Interfaces:

javax.servlet.Filter

public class SecureHeadersFilter
extends Object
implements javax.servlet.Filter

HSTS servlet filter For a detailed explanation please take a look at http://aerogear.org/docs/guides/aerogear-security/

Note: This implementation has been borrowed from Aerogear Security.

Field Summary

Fields

Modifier and Type	Field	Description
static String	LOCATION
static String	STRICT_TRANSPORT_SECURITY
static String	X_FRAME_OPTIONS
static String	X_XSS_OPTIONS

Constructor Summary

Constructors

Constructor	Description
SecureHeadersFilter()

Method Summary

Modifier and Type	Method	Description
static void	applyHeaders(javax.servlet.ServletRequest request, javax.servlet.http.HttpServletResponse response)
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOCATION

public static final String LOCATION

See Also:

Constant Field Values

STRICT_TRANSPORT_SECURITY

public static final String STRICT_TRANSPORT_SECURITY

See Also:

Constant Field Values

X_FRAME_OPTIONS

public static final String X_FRAME_OPTIONS

See Also:

Constant Field Values

X_XSS_OPTIONS

public static final String X_XSS_OPTIONS

See Also:

Constant Field Values

Constructor Detail

SecureHeadersFilter

public SecureHeadersFilter()

Method Detail

applyHeaders

public static void applyHeaders(javax.servlet.ServletRequest request,
                                javax.servlet.http.HttpServletResponse response)

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException