Package org.onebusaway.container

Class ObaSecurityHeaderFilter

java.lang.Object

org.onebusaway.container.ObaSecurityHeaderFilter

All Implemented Interfaces:

javax.servlet.Filter

public class ObaSecurityHeaderFilter
extends Object
implements javax.servlet.Filter

A place to add security filters as requested by client security policies. Inspired by org.apache.catalina.filters.HttpHeaderSecurityFilter which sadly doesn't do enough.

Field Summary

Fields

Modifier and Type	Field	Description
static String	CONTENT_SECURITY_POLICY_OPTION
static String	CSP_FRAME_ANCESTORS_HOST_SUB_OPTION
static String	CSP_NONE_SUB_OPTION
static String	CSP_SELF_SUB_OPTION

Constructor Summary

Constructors

Constructor	Description
ObaSecurityHeaderFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CONTENT_SECURITY_POLICY_OPTION

public static final String CONTENT_SECURITY_POLICY_OPTION

See Also:

Constant Field Values

CSP_FRAME_ANCESTORS_HOST_SUB_OPTION

public static final String CSP_FRAME_ANCESTORS_HOST_SUB_OPTION

See Also:

Constant Field Values

CSP_NONE_SUB_OPTION

public static final String CSP_NONE_SUB_OPTION

See Also:

Constant Field Values

CSP_SELF_SUB_OPTION

public static final String CSP_SELF_SUB_OPTION

See Also:

Constant Field Values

Constructor Detail

ObaSecurityHeaderFilter

public ObaSecurityHeaderFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter