org.springframework.security.web.server.header

Class XFrameOptionsHttpHeadersWriter

java.lang.Object

org.springframework.security.web.server.header.XFrameOptionsHttpHeadersWriter

All Implemented Interfaces:

HttpHeadersWriter

public class XFrameOptionsHttpHeadersWriter
extends java.lang.Object
implements HttpHeadersWriter

Since:

5.0

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	XFrameOptionsHttpHeadersWriter.Mode The X-Frame-Options values.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	X_FRAME_OPTIONS

Constructor Summary

Constructors

Constructor and Description
XFrameOptionsHttpHeadersWriter()

Method Summary

Modifier and Type	Method and Description
void	setMode(XFrameOptionsHttpHeadersWriter.Mode mode) Sets the X-Frame-Options mode.
<any>	writeHttpHeaders(ServerWebExchange exchange) Write the headers to the response.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X_FRAME_OPTIONS

public static final java.lang.String X_FRAME_OPTIONS

See Also:

Constant Field Values

Constructor Detail

XFrameOptionsHttpHeadersWriter

public XFrameOptionsHttpHeadersWriter()

Method Detail

writeHttpHeaders

public <any> writeHttpHeaders(ServerWebExchange exchange)

Description copied from interface: HttpHeadersWriter

Write the headers to the response.

Specified by:

writeHttpHeaders in interface HttpHeadersWriter

Returns:

A Mono which is returned to the Supplier of the ServerHttpResponse#beforeCommit(Supplier).

setMode

public void setMode(XFrameOptionsHttpHeadersWriter.Mode mode)

Sets the X-Frame-Options mode. There is no support for ALLOW-FROM because not all browsers support it. Consider using X-Frame-Options with Content-Security-Policy frame-ancestors.

Parameters:

mode -