Package org.springframework.security.config.annotation.web.configurers

Class HeadersConfigurer.FrameOptionsConfig

java.lang.Object

org.springframework.security.config.annotation.web.configurers.HeadersConfigurer.FrameOptionsConfig

Enclosing class:

HeadersConfigurer<H extends HttpSecurityBuilder<H>>

public final class HeadersConfigurer.FrameOptionsConfig
extends java.lang.Object

Method Summary

Modifier and Type	Method	Description
HeadersConfigurer<H>	and()	Allows continuing customizing the headers configuration.
HeadersConfigurer<H>	deny()	Specify to DENY framing any content from this application.
HeadersConfigurer<H>	disable()	Prevents the header from being added to the response.
HeadersConfigurer<H>	sameOrigin()	Specify to allow any request that comes from the same origin to frame this application.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

deny

public HeadersConfigurer<H> deny()

Specify to DENY framing any content from this application.

Returns:

the HeadersConfigurer for additional customization.

sameOrigin

public HeadersConfigurer<H> sameOrigin()

Specify to allow any request that comes from the same origin to frame this application. For example, if the application was hosted on example.com, then example.com could frame the application, but evil.com could not frame the application.

Returns:

the HeadersConfigurer for additional customization.

disable

public HeadersConfigurer<H> disable()

Prevents the header from being added to the response.

Returns:

the HeadersConfigurer for additional configuration.

and

public HeadersConfigurer<H> and()

Allows continuing customizing the headers configuration.

Returns:

the HeadersConfigurer for additional configuration