public class WebSocketAwareCsrfPreventionRequestCycleListener extends CsrfPreventionRequestCycleListener
CsrfPreventionRequestCycleListener
that should be used when
the application uses Web Sockets.
The HTTP upgrade request brings Origin in its headers, but any Web socket frame doesn't
bring it so WebSocketRequestHandler
and WebSocketMessageBroadcastHandler
should be ignored.
CsrfPreventionRequestCycleListener.CsrfAction
Constructor and Description |
---|
WebSocketAwareCsrfPreventionRequestCycleListener() |
Modifier and Type | Method and Description |
---|---|
protected boolean |
isChecked(IRequestHandler handler)
Override to change the request handler types that are checked.
|
abortHandler, addAcceptedOrigin, allowHandler, checkRequest, getSourceUri, getTargetUriFromRequest, isChecked, isEnabled, isLocalOrigin, isWhitelistedHost, matchingOrigin, normalizeUri, onAborted, onAllowed, onBeginRequest, onMatchingOrigin, onRequestHandlerResolved, onSuppressed, onWhitelisted, setConflictingOriginAction, setErrorCode, setErrorMessage, setNoOriginAction, suppressHandler, unwrap, whitelistedHandler
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
onDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMapped
public WebSocketAwareCsrfPreventionRequestCycleListener()
protected boolean isChecked(IRequestHandler handler)
CsrfPreventionRequestCycleListener
isChecked
in class CsrfPreventionRequestCycleListener
handler
- the handler that is currently processinghandler
Copyright © 2006–2022 Apache Software Foundation. All rights reserved.