org.jboss.aerogear.security.web.filter

Class SecureHeadersFilter

java.lang.Object

org.jboss.aerogear.security.web.filter.SecureHeadersFilter

All Implemented Interfaces:

javax.servlet.Filter

public class SecureHeadersFilter
extends Object
implements javax.servlet.Filter

HSTS servlet filter For a detailed explanation please take a look at http://aerogear.org/docs/guides/aerogear-security/

Field Summary

Fields

Modifier and Type	Field and Description
private SecureHeadersConfig	config
static String	LOCATION
static String	STRICT_TRANSPORT_SECURITY
static String	X_FRAME_OPTIONS

Constructor Summary

Constructors

Constructor and Description
SecureHeadersFilter()

Method Summary

Methods

Modifier and Type	Method and Description
private void	addFrameOptions(javax.servlet.http.HttpServletResponse response)
private void	addLocation(javax.servlet.http.HttpServletResponse response)
private void	addStrictTransportSecurity(javax.servlet.http.HttpServletResponse response)
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain chain)
void	init(javax.servlet.FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOCATION

public static final String LOCATION

See Also:

Constant Field Values

STRICT_TRANSPORT_SECURITY

public static final String STRICT_TRANSPORT_SECURITY

See Also:

Constant Field Values

X_FRAME_OPTIONS

public static final String X_FRAME_OPTIONS

See Also:

Constant Field Values

config

private SecureHeadersConfig config

Constructor Detail

SecureHeadersFilter

public SecureHeadersFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
            javax.servlet.ServletResponse servletResponse,
            javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

addStrictTransportSecurity

private void addStrictTransportSecurity(javax.servlet.http.HttpServletResponse response)

addFrameOptions

private void addFrameOptions(javax.servlet.http.HttpServletResponse response)

addLocation

private void addLocation(javax.servlet.http.HttpServletResponse response)