org.springframework.security.web.servlet.support.csrf
Class CsrfRequestDataValueProcessor

java.lang.Object
  org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

All Implemented Interfaces:

RequestDataValueProcessor

public final class CsrfRequestDataValueProcessor
extends Object
implements RequestDataValueProcessor

Integration with Spring Web MVC that automatically adds the CsrfToken into forms with hidden inputs when using Spring tag libraries.

Since:

3.2

Constructor Summary

CsrfRequestDataValueProcessor()

Method Summary

Map<String,String>	getExtraHiddenFields(javax.servlet.http.HttpServletRequest request)
String	processAction(javax.servlet.http.HttpServletRequest request, String action)
String	processFormFieldValue(javax.servlet.http.HttpServletRequest request, String name, String value, String type)
String	processUrl(javax.servlet.http.HttpServletRequest request, String url)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CsrfRequestDataValueProcessor

public CsrfRequestDataValueProcessor()

Method Detail

processAction

public String processAction(javax.servlet.http.HttpServletRequest request,
                            String action)

Specified by:

processAction in interface RequestDataValueProcessor

processFormFieldValue

public String processFormFieldValue(javax.servlet.http.HttpServletRequest request,
                                    String name,
                                    String value,
                                    String type)

Specified by:

processFormFieldValue in interface RequestDataValueProcessor

getExtraHiddenFields

public Map<String,String> getExtraHiddenFields(javax.servlet.http.HttpServletRequest request)

Specified by:

getExtraHiddenFields in interface RequestDataValueProcessor

processUrl

public String processUrl(javax.servlet.http.HttpServletRequest request,
                         String url)

Specified by:

processUrl in interface RequestDataValueProcessor