Package org.springframework.security.web.server.header

Enum XFrameOptionsServerHttpHeadersWriter.Mode

java.lang.Object

java.lang.Enum<XFrameOptionsServerHttpHeadersWriter.Mode>

org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode

All Implemented Interfaces:

java.io.Serializable, java.lang.Comparable<XFrameOptionsServerHttpHeadersWriter.Mode>

Enclosing class:

XFrameOptionsServerHttpHeadersWriter

public static enum XFrameOptionsServerHttpHeadersWriter.Mode
extends java.lang.Enum<XFrameOptionsServerHttpHeadersWriter.Mode>

The X-Frame-Options values. There is no support for ALLOW-FROM because not all browsers support it. Consider using X-Frame-Options with Content-Security-Policy frame-ancestors.

Since:

5.0

Enum Constant Summary

Enum Constants

Enum Constant	Description
DENY	A browser receiving content with this header field MUST NOT display this content in any frame.
SAMEORIGIN	A browser receiving content with this header field MUST NOT display this content in any frame from a page of different origin than the content itself.

Method Summary

Modifier and Type	Method	Description
static XFrameOptionsServerHttpHeadersWriter.Mode	valueOf(java.lang.String name)	Returns the enum constant of this type with the specified name.
static XFrameOptionsServerHttpHeadersWriter.Mode[]	values()	Returns an array containing the constants of this enum type, in the order they are declared.

Methods inherited from class java.lang.Enum

clone, compareTo, equals, finalize, getDeclaringClass, hashCode, name, ordinal, toString, valueOf

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Enum Constant Detail

DENY

public static final XFrameOptionsServerHttpHeadersWriter.Mode DENY

A browser receiving content with this header field MUST NOT display this content in any frame.

SAMEORIGIN

public static final XFrameOptionsServerHttpHeadersWriter.Mode SAMEORIGIN

A browser receiving content with this header field MUST NOT display this content in any frame from a page of different origin than the content itself. If a browser or plugin cannot reliably determine whether or not the origin of the content and the frame are the same, this MUST be treated as "DENY".

Method Detail

values

public static XFrameOptionsServerHttpHeadersWriter.Mode[] values()

Returns an array containing the constants of this enum type, in the order they are declared. This method may be used to iterate over the constants as follows:

for (XFrameOptionsServerHttpHeadersWriter.Mode c : XFrameOptionsServerHttpHeadersWriter.Mode.values())
    System.out.println(c);

Returns:

an array containing the constants of this enum type, in the order they are declared

valueOf

public static XFrameOptionsServerHttpHeadersWriter.Mode valueOf(java.lang.String name)

Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)

Parameters:

name - the name of the enum constant to be returned.

Returns:

the enum constant with the specified name

Throws:

java.lang.IllegalArgumentException - if this enum type has no constant with the specified name

java.lang.NullPointerException - if the argument is null