Package io.hawt.web.filters

Class CORSFilter

java.lang.Object

io.hawt.web.filters.HttpHeaderFilter

io.hawt.web.filters.CORSFilter

All Implemented Interfaces:

jakarta.servlet.Filter

public class CORSFilter
extends HttpHeaderFilter

https://developer.mozilla.org/ja/docs/Web/HTTP/Headers/Access-Control-Allow-Origin

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCESS_CONTROL_ALLOW_ORIGIN
static final String	ENABLE_CORS
static final String	HAWTIO_ACCESS_CONTROL_ALLOW_ORIGIN
static final String	HAWTIO_ENABLE_CORS

Fields inherited from class io.hawt.web.filters.HttpHeaderFilter

ALLOW_X_FRAME_SAME_ORIGIN, HAWTIO_ALLOW_X_FRAME_SAME_ORIGIN

Constructor Summary

Constructors

Constructor	Description
CORSFilter()

Method Summary

Modifier and Type	Method	Description
protected void	addHeaders(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
void	init(jakarta.servlet.FilterConfig filterConfig)
protected ForbiddenReason	verifyHeaders(jakarta.servlet.http.HttpServletRequest request)	Requests with HTTPS origin over HTTP should be refused to process.

Methods inherited from class io.hawt.web.filters.HttpHeaderFilter

doFilter, getConfigParameter, isXFrameSameOriginAllowed

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface jakarta.servlet.Filter

destroy

Field Details

ENABLE_CORS

public static final String ENABLE_CORS

See Also:

• Constant Field Values

HAWTIO_ENABLE_CORS

public static final String HAWTIO_ENABLE_CORS

See Also:

• Constant Field Values

ACCESS_CONTROL_ALLOW_ORIGIN

public static final String ACCESS_CONTROL_ALLOW_ORIGIN

See Also:

• Constant Field Values

HAWTIO_ACCESS_CONTROL_ALLOW_ORIGIN

public static final String HAWTIO_ACCESS_CONTROL_ALLOW_ORIGIN

See Also:

• Constant Field Values

Constructor Details

CORSFilter

public CORSFilter()

Method Details

init

public void init(jakarta.servlet.FilterConfig filterConfig)
          throws jakarta.servlet.ServletException

Specified by:

init in interface jakarta.servlet.Filter

Overrides:

init in class HttpHeaderFilter

Throws:

jakarta.servlet.ServletException

verifyHeaders

protected ForbiddenReason verifyHeaders(jakarta.servlet.http.HttpServletRequest request)

Requests with HTTPS origin over HTTP should be refused to process.

Overrides:

verifyHeaders in class HttpHeaderFilter

addHeaders

protected void addHeaders(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

Specified by:

addHeaders in class HttpHeaderFilter