Package org.springframework.security.web.header.writers
@NullMarked
package org.springframework.security.web.header.writers
APIs for writing security HTTP Headers.
-
ClassDescriptionInserts headers to prevent caching if no cache control headers have been specified.Provides support for Clear Site Data.Represents the directive values expected by the
ClearSiteDataHeaderWriter.AHeaderWriterthat delegates to several otherHeaderWriters.Provides support for Content Security Policy (CSP) Level 2.Inserts Cross-Origin-Embedder-Policy header.Inserts the Cross-Origin-Opener-Policy headerInserts Cross-Origin-Resource-Policy headerDelegates to the providedHeaderWriterwhenRequestMatcher.matches(HttpServletRequest)returns true.Provides support for Feature Policy.Deprecated.see Certificate and Public Key Pinning for more contextProvides support for HTTP Strict Transport Security (HSTS).Provides support for Permisisons Policy.Provides support for Referrer Policy.HeaderWriterimplementation which writes the sameHeaderinstance.AStaticHeadersWriterthat inserts headers to prevent content sniffing.Renders the X-XSS-Protection header.The value of the x-xss-protection header.