Package org.springframework.security.web.server.header

Class ContentSecurityPolicyServerHttpHeadersWriter

java.lang.Object
org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
All Implemented Interfaces:
ServerHttpHeadersWriter
public final class ContentSecurityPolicyServerHttpHeadersWriter extends Object implements ServerHttpHeadersWriter
Writes the Contet-Security-Policy response header with configured policy directives.
Since:
5.1

  • Field Details

  • Constructor Details

    • ContentSecurityPolicyServerHttpHeadersWriter

      public ContentSecurityPolicyServerHttpHeadersWriter()

  • Method Details

    • writeHttpHeaders

      public reactor.core.publisher.Mono<Void> writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)
      Description copied from interface: ServerHttpHeadersWriter
      Write the headers to the response.
      Specified by:
      writeHttpHeaders in interface ServerHttpHeadersWriter
      Returns:
      A Mono which is returned to the Supplier of the ReactiveHttpOutputMessage.beforeCommit(Supplier).

    • setPolicyDirectives

      public void setPolicyDirectives(String policyDirectives)
      Set the policy directive(s) to be used in the response header.
      Parameters:
      policyDirectives - the policy directive(s)
      Throws:
      IllegalArgumentException - if policyDirectives is null or empty

    • setReportOnly

      public void setReportOnly(boolean reportOnly)
      Set whether to include the Content-Security-Policy-Report-Only header in the response. Otherwise, defaults to the Content-Security-Policy header.
      Parameters:
      reportOnly - whether to only report policy violations