Class XXssProtectionServerHttpHeadersWriter
- java.lang.Object
-
- org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter
-
- All Implemented Interfaces:
ServerHttpHeadersWriter
public class XXssProtectionServerHttpHeadersWriter extends java.lang.Object implements ServerHttpHeadersWriter
Add the x-xss-protection header.- Since:
- 5.0
-
-
Field Summary
Fields Modifier and Type Field Description static java.lang.String
X_XSS_PROTECTION
-
Constructor Summary
Constructors Constructor Description XXssProtectionServerHttpHeadersWriter()
Creates a new instance
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
setBlock(boolean block)
If false, will not specify the mode as blocked.void
setEnabled(boolean enabled)
If true, will contain a value of 1.reactor.core.publisher.Mono<java.lang.Void>
writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)
Write the headers to the response.
-
-
-
Field Detail
-
X_XSS_PROTECTION
public static final java.lang.String X_XSS_PROTECTION
- See Also:
- Constant Field Values
-
-
Method Detail
-
writeHttpHeaders
public reactor.core.publisher.Mono<java.lang.Void> writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)
Description copied from interface:ServerHttpHeadersWriter
Write the headers to the response.- Specified by:
writeHttpHeaders
in interfaceServerHttpHeadersWriter
- Returns:
- A Mono which is returned to the
Supplier
of theReactiveHttpOutputMessage.beforeCommit(Supplier)
.
-
setEnabled
public void setEnabled(boolean enabled)
If true, will contain a value of 1. For example:X-XSS-Protection: 1
or ifsetBlock(boolean)
is trueX-XSS-Protection: 1; mode=block
If false, will explicitly disable specify that X-XSS-Protection is disabled. For example:X-XSS-Protection: 0
- Parameters:
enabled
- the new value
-
setBlock
public void setBlock(boolean block)
If false, will not specify the mode as blocked. In this instance, any content will be attempted to be fixed. If true, the content will be replaced with "#".- Parameters:
block
- the new value
-
-