Package edu.cornell.mannlib.vitro.webapp.filters

Class ClickjackFilter

java.lang.Object

edu.cornell.mannlib.vitro.webapp.filters.ClickjackFilter

All Implemented Interfaces:

javax.servlet.Filter

@WebFilter(filterName="ClickjackFilter",
           urlPatterns="/*",
           dispatcherTypes={REQUEST,FORWARD})
public class ClickjackFilter
extends Object
implements javax.servlet.Filter

Add X-FRAME-OPTIONS response header to tell IE8 (and any other browsers who decide to implement) not to display this content in a frame. For details, refer to http://blogs.msdn.com/sdl/archive/2009/02/05/clickjacking-defense-in-ie8.aspx, https://www.owasp.org/index.php/ClickjackFilter_for_Java_EE

Constructor Summary

Constructors

Constructor	Description
ClickjackFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig fc)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ClickjackFilter

public ClickjackFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

init

public void init(javax.servlet.FilterConfig fc)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter