org.alfresco.web.site.servlet

Class SecurityHeadersFilter

java.lang.Object

org.alfresco.web.site.servlet.SecurityHeadersFilter

All Implemented Interfaces:

javax.servlet.Filter

public class SecurityHeadersFilter
extends java.lang.Object
implements javax.servlet.Filter

A filter adding HTTP response headers to incoming requests to improve security for the webapp. The logic is configurable making it possible to configure which headers that shall be added.

Constructor Summary

Constructors

Constructor and Description
SecurityHeadersFilter()

Method Summary

Methods

Modifier and Type	Method and Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain) Will add the configured response headers to the response.
void	init(javax.servlet.FilterConfig config) Parses the headers config.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityHeadersFilter

public SecurityHeadersFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig config)
          throws javax.servlet.ServletException

Parses the headers config.

Specified by:

init in interface javax.servlet.Filter

Parameters:

config - The filter config

Throws:

javax.servlet.ServletException - if the headers filter config is invalid

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
            javax.servlet.ServletResponse servletResponse,
            javax.servlet.FilterChain filterChain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Will add the configured response headers to the response.

Specified by:

doFilter in interface javax.servlet.Filter

Parameters:

servletRequest - The servlet request

servletResponse - The servlet response

filterChain - The filter chain

Throws:

java.io.IOException

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter