Package org.springframework.security.web.server.header

Class XXssProtectionServerHttpHeadersWriter

java.lang.Object

org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter

All Implemented Interfaces:

ServerHttpHeadersWriter

public class XXssProtectionServerHttpHeadersWriter
extends Object
implements ServerHttpHeadersWriter

Add the x-xss-protection header.

Since:

5.0

Field Summary

Fields

Modifier and Type	Field	Description
static final String	X_XSS_PROTECTION

Constructor Summary

Constructors

Constructor	Description
XXssProtectionServerHttpHeadersWriter()	Creates a new instance

Method Summary

Modifier and Type	Method	Description
void	setBlock(boolean block)	If false, will not specify the mode as blocked.
void	setEnabled(boolean enabled)	If true, will contain a value of 1.
reactor.core.publisher.Mono<Void>	writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)	Write the headers to the response.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

X_XSS_PROTECTION

public static final String X_XSS_PROTECTION

See Also:

• Constant Field Values

Constructor Details

XXssProtectionServerHttpHeadersWriter

public XXssProtectionServerHttpHeadersWriter()

Creates a new instance

Method Details

writeHttpHeaders

public reactor.core.publisher.Mono<Void> writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)

Description copied from interface: ServerHttpHeadersWriter

Write the headers to the response.

Specified by:

writeHttpHeaders in interface ServerHttpHeadersWriter

Returns:

A Mono which is returned to the Supplier of the ReactiveHttpOutputMessage.beforeCommit(Supplier).

setEnabled

public void setEnabled(boolean enabled)

If true, will contain a value of 1. For example:

 X-XSS-Protection: 1
 

or if setBlock(boolean) is true

 X-XSS-Protection: 1; mode=block
 

If false, will explicitly disable specify that X-XSS-Protection is disabled. For example:

 X-XSS-Protection: 0
 

Parameters:

enabled - the new value

setBlock

public void setBlock(boolean block)

If false, will not specify the mode as blocked. In this instance, any content will be attempted to be fixed. If true, the content will be replaced with "#".

Parameters:

block - the new value