Module org.apache.wicket.core
Package org.apache.wicket.protocol.http
Interface IResourceIsolationPolicy
- All Known Implementing Classes:
FetchMetadataResourceIsolationPolicy
,OriginResourceIsolationPolicy
- Functional Interface:
- This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
Interface for the resource isolation policies.
Resource isolation policies are designed to protect against cross origin attacks.
See FetchMetadataResourceIsolationPolicy
for the default implementation used
by ResourceIsolationRequestCycleListener
.
- Author:
- Santiago Diaz - saldiaz@google.com, Ecenaz Jen Ozmen - ecenazo@google.com
- See Also:
-
Nested Class Summary
Modifier and TypeInterfaceDescriptionstatic enum
Indicates the outcome for a resource isolation policy for a request. -
Method Summary
Modifier and TypeMethodDescriptionisRequestAllowed
(jakarta.servlet.http.HttpServletRequest request, IRequestablePage targetPage) Is the given request allowed.default void
setHeaders
(jakarta.servlet.http.HttpServletResponse response) Set possible response headers.
-
Method Details
-
isRequestAllowed
IResourceIsolationPolicy.ResourceIsolationOutcome isRequestAllowed(jakarta.servlet.http.HttpServletRequest request, IRequestablePage targetPage) Is the given request allowed.- Parameters:
request
- requesttargetPage
- targeted page- Returns:
- outcome, must not be
null
-
setHeaders
Set possible response headers.- Parameters:
response
-
-