Interface HttpFirewall

  • All Known Implementing Classes:
    DefaultHttpFirewall, StrictHttpFirewall

    public interface HttpFirewall
    Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.

    The implementation is injected into the FilterChainProxy and will be invoked before sending any request through the filter chain. It can also provide a response wrapper if the response behaviour should also be restricted.

    • Method Detail

      • getFirewalledResponse

        javax.servlet.http.HttpServletResponse getFirewalledResponse​(javax.servlet.http.HttpServletResponse response)
        Provides the response which will be passed through the filter chain.
        Parameters:
        response - the original response
        Returns:
        either the original response or a replacement/wrapper.