Module org.apache.wicket.core

Package org.apache.wicket.csp

Class CSPRequestCycleListener

java.lang.Object

org.apache.wicket.csp.CSPRequestCycleListener

All Implemented Interfaces:

IRequestCycleListener

public class CSPRequestCycleListener
extends Object
implements IRequestCycleListener

An IRequestCycleListener that adds Content-Security-Policy and/or Content-Security-Policy-Report-Only headers based on the supplied configuration.

Author:

Sven Haster, Emond Papegaaij

Constructor Summary

Constructors

Constructor	Description
CSPRequestCycleListener(ContentSecurityPolicySettings settings)

Method Summary

Modifier and Type	Method	Description
protected boolean	mustProtect(IRequestHandler handler)	Must the given handler be protected.
void	onRequestHandlerExecuted(RequestCycle cycle, IRequestHandler handler)	Called after an IRequestHandler has been executed.
void	onRequestHandlerResolved(RequestCycle cycle, IRequestHandler handler)	Called when an IRequestHandler is resolved and will be executed.
protected void	protect(RequestCycle cycle, IRequestHandler handler)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.wicket.request.cycle.IRequestCycleListener

onBeginRequest, onDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerScheduled, onUrlMapped

Constructor Details

CSPRequestCycleListener

public CSPRequestCycleListener(ContentSecurityPolicySettings settings)

Method Details

onRequestHandlerResolved

public void onRequestHandlerResolved(RequestCycle cycle,
 IRequestHandler handler)

Description copied from interface: IRequestCycleListener

Called when an IRequestHandler is resolved and will be executed.

Specified by:

onRequestHandlerResolved in interface IRequestCycleListener

onRequestHandlerExecuted

public void onRequestHandlerExecuted(RequestCycle cycle,
 IRequestHandler handler)

Description copied from interface: IRequestCycleListener

Called after an IRequestHandler has been executed. If the execution resulted in an exception this method will not be called for that particular IRequestHandler.

Specified by:

onRequestHandlerExecuted in interface IRequestCycleListener

protect

protected void protect(RequestCycle cycle,
 IRequestHandler handler)

mustProtect

protected boolean mustProtect(IRequestHandler handler)

Must the given handler be protected.

Parameters:

handler - handler

Returns:

true if must be protected

See Also:

• ContentSecurityPolicySettings.mustProtectRequest(IRequestHandler)