Interface HttpFirewall
-
- All Known Implementing Classes:
DefaultHttpFirewall,StrictHttpFirewall
public interface HttpFirewallInterface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.The implementation is injected into the
FilterChainProxyand will be invoked before sending any request through the filter chain. It can also provide a response wrapper if the response behaviour should also be restricted.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description FirewalledRequestgetFirewalledRequest(javax.servlet.http.HttpServletRequest request)Provides the request object which will be passed through the filter chain.javax.servlet.http.HttpServletResponsegetFirewalledResponse(javax.servlet.http.HttpServletResponse response)Provides the response which will be passed through the filter chain.
-
-
-
Method Detail
-
getFirewalledRequest
FirewalledRequest getFirewalledRequest(javax.servlet.http.HttpServletRequest request) throws RequestRejectedException
Provides the request object which will be passed through the filter chain.- Throws:
RequestRejectedException- if the request should be rejected immediately
-
getFirewalledResponse
javax.servlet.http.HttpServletResponse getFirewalledResponse(javax.servlet.http.HttpServletResponse response)
Provides the response which will be passed through the filter chain.- Parameters:
response- the original response- Returns:
- either the original response or a replacement/wrapper.
-
-