org.springframework.security.web.header.writers

Class XXssProtectionHeaderWriter

java.lang.Object

org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

All Implemented Interfaces:

HeaderWriter

public final class XXssProtectionHeaderWriter
extends java.lang.Object
implements HeaderWriter

Renders the X-XSS-Protection header.

Since:

3.2

Constructor Summary

Constructors

Constructor and Description
XXssProtectionHeaderWriter() Create a new instance

Method Summary

Modifier and Type	Method and Description
void	setBlock(boolean block) If false, will not specify the mode as blocked.
void	setEnabled(boolean enabled) If true, will contain a value of 1.
java.lang.String	toString()
void	writeHeaders(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Create a Header instance.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

XXssProtectionHeaderWriter

public XXssProtectionHeaderWriter()

Create a new instance

Method Detail

writeHeaders

public void writeHeaders(javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response)

Description copied from interface: HeaderWriter

Create a Header instance.

Specified by:

writeHeaders in interface HeaderWriter

Parameters:

request - the request

response - the response

setEnabled

public void setEnabled(boolean enabled)

If true, will contain a value of 1. For example:

 X-XSS-Protection: 1
 

or if setBlock(boolean) is true

 X-XSS-Protection: 1; mode=block
 

If false, will explicitly disable specify that X-XSS-Protection is disabled. For example:

 X-XSS-Protection: 0
 

Parameters:

enabled - the new value

setBlock

public void setBlock(boolean block)

If false, will not specify the mode as blocked. In this instance, any content will be attempted to be fixed. If true, the content will be replaced with "#".

Parameters:

block - the new value

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object