Package org.springframework.security.web.firewall
-
Interface Summary Interface Description HttpFirewall Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.RequestRejectedHandler Used byFilterChainProxyto handle anRequestRejectedException. -
Class Summary Class Description DefaultHttpFirewall User's should consider usingStrictHttpFirewallbecause rather than trying to sanitize a malicious URL it rejects the malicious URL providing better security guarantees.DefaultRequestRejectedHandler Default implementation ofRequestRejectedHandlerthat simply rethrows the exception.FirewalledRequest Request wrapper which is returned by theHttpFirewallinterface.HttpStatusRequestRejectedHandler A simple implementation ofRequestRejectedHandlerthat sends an error with configurable status code.StrictHttpFirewall A strict implementation ofHttpFirewallthat rejects any suspicious requests with aRequestRejectedException. -
Exception Summary Exception Description RequestRejectedException