Package org.camunda.bpm.webapp.impl.security.filter.headersec.provider.impl

Class ContentSecurityPolicyProvider

java.lang.Object

org.camunda.bpm.webapp.impl.security.filter.headersec.provider.HeaderSecurityProvider

org.camunda.bpm.webapp.impl.security.filter.headersec.provider.impl.ContentSecurityPolicyProvider

public class ContentSecurityPolicyProvider
extends HeaderSecurityProvider

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	ATTR_CSP_FILTER_NONCE
static java.lang.String	DISABLED_PARAM
static java.util.Base64.Encoder	ENCODER
static java.lang.String	HEADER_DEFAULT_VALUE
static java.lang.String	HEADER_NAME
static java.lang.String	HEADER_NONCE_PLACEHOLDER
static java.lang.String	VALUE_PARAM

Fields inherited from class org.camunda.bpm.webapp.impl.security.filter.headersec.provider.HeaderSecurityProvider

disabled, initParams, value

Constructor Summary

Constructors

Constructor	Description
ContentSecurityPolicyProvider()

Method Summary

Modifier and Type	Method	Description
protected java.lang.String	generateNonce()
java.lang.String	getHeaderName()
java.lang.String	getHeaderValue(javax.servlet.ServletContext servletContext)
java.util.Map<java.lang.String,java.lang.String>	initParams()
protected java.lang.String	normalizeString(java.lang.String value)
void	parseParams()

Methods inherited from class org.camunda.bpm.webapp.impl.security.filter.headersec.provider.HeaderSecurityProvider

isDisabled, setDisabled, setValue

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HEADER_NAME

public static final java.lang.String HEADER_NAME

See Also:

Constant Field Values

HEADER_NONCE_PLACEHOLDER

public static final java.lang.String HEADER_NONCE_PLACEHOLDER

See Also:

Constant Field Values

HEADER_DEFAULT_VALUE

public static final java.lang.String HEADER_DEFAULT_VALUE

See Also:

Constant Field Values

DISABLED_PARAM

public static final java.lang.String DISABLED_PARAM

See Also:

Constant Field Values

VALUE_PARAM

public static final java.lang.String VALUE_PARAM

See Also:

Constant Field Values

ATTR_CSP_FILTER_NONCE

public static final java.lang.String ATTR_CSP_FILTER_NONCE

See Also:

Constant Field Values

ENCODER

public static final java.util.Base64.Encoder ENCODER

Constructor Detail

ContentSecurityPolicyProvider

public ContentSecurityPolicyProvider()

Method Detail

initParams

public java.util.Map<java.lang.String,java.lang.String> initParams()

Specified by:

initParams in class HeaderSecurityProvider

parseParams

public void parseParams()

Specified by:

parseParams in class HeaderSecurityProvider

normalizeString

protected java.lang.String normalizeString(java.lang.String value)

getHeaderName

public java.lang.String getHeaderName()

Specified by:

getHeaderName in class HeaderSecurityProvider

getHeaderValue

public java.lang.String getHeaderValue(javax.servlet.ServletContext servletContext)

Overrides:

getHeaderValue in class HeaderSecurityProvider

generateNonce

protected java.lang.String generateNonce()