Package org.springframework.security.web.firewall
-
Interface Summary Interface Description HttpFirewall Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.RequestRejectedHandler Used byFilterChainProxy
to handle anRequestRejectedException
. -
Class Summary Class Description DefaultHttpFirewall User's should consider usingStrictHttpFirewall
because rather than trying to sanitize a malicious URL it rejects the malicious URL providing better security guarantees.DefaultRequestRejectedHandler Default implementation ofRequestRejectedHandler
that simply rethrows the exception.FirewalledRequest Request wrapper which is returned by theHttpFirewall
interface.HttpStatusRequestRejectedHandler A simple implementation ofRequestRejectedHandler
that sends an error with configurable status code.StrictHttpFirewall A strict implementation ofHttpFirewall
that rejects any suspicious requests with aRequestRejectedException
. -
Exception Summary Exception Description RequestRejectedException