spring security HttpFirewall 源码

  • 2022-08-13
  • 浏览 (472)

spring security HttpFirewall 代码

文件路径:/web/src/main/java/org/springframework/security/web/firewall/HttpFirewall.java

/*
 * Copyright 2002-2016 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      https://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.springframework.security.web.firewall;

import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

/**
 * Interface which can be used to reject potentially dangerous requests and/or wrap them
 * to control their behaviour.
 * <p>
 * The implementation is injected into the {@code FilterChainProxy} and will be invoked
 * before sending any request through the filter chain. It can also provide a response
 * wrapper if the response behaviour should also be restricted.
 *
 * @author Luke Taylor
 */
public interface HttpFirewall {

	/**
	 * Provides the request object which will be passed through the filter chain.
	 * @throws RequestRejectedException if the request should be rejected immediately
	 */
	FirewalledRequest getFirewalledRequest(HttpServletRequest request) throws RequestRejectedException;

	/**
	 * Provides the response which will be passed through the filter chain.
	 * @param response the original response
	 * @return either the original response or a replacement/wrapper.
	 */
	HttpServletResponse getFirewalledResponse(HttpServletResponse response);

}

相关信息

spring security 源码目录

相关文章

spring security CompositeRequestRejectedHandler 源码

spring security DefaultHttpFirewall 源码

spring security DefaultRequestRejectedHandler 源码

spring security FirewalledRequest 源码

spring security FirewalledResponse 源码

spring security HttpStatusRequestRejectedHandler 源码

spring security RequestRejectedException 源码

spring security RequestRejectedHandler 源码

spring security RequestWrapper 源码

spring security StrictHttpFirewall 源码

0  赞