Module org.apache.wicket.core

Package org.apache.wicket.protocol.http

Interface IResourceIsolationPolicy

All Known Implementing Classes:

FetchMetadataResourceIsolationPolicy, OriginResourceIsolationPolicy

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public interface IResourceIsolationPolicy

Interface for the resource isolation policies.

Resource isolation policies are designed to protect against cross-origin attacks.

See FetchMetadataResourceIsolationPolicy for the default implementation used by ResourceIsolationRequestCycleListener.

Author:

Santiago Diaz - saldiaz@google.com, Ecenaz Jen Ozmen - ecenazo@google.com

See Also:

• https://web.dev/fetch-metadata/

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static enum	IResourceIsolationPolicy.ResourceIsolationOutcome	Indicates the outcome for a resource isolation policy for a request.

Method Summary

Modifier and Type	Method	Description
IResourceIsolationPolicy.ResourceIsolationOutcome	isRequestAllowed(jakarta.servlet.http.HttpServletRequest request, IRequestablePage targetPage)	Is the given request allowed.
default void	setHeaders(jakarta.servlet.http.HttpServletResponse response)	Set possible response headers.

Method Details

isRequestAllowed

IResourceIsolationPolicy.ResourceIsolationOutcome isRequestAllowed(jakarta.servlet.http.HttpServletRequest request,
 IRequestablePage targetPage)

Is the given request allowed.

Parameters:

request - request

targetPage - targeted page

Returns:

outcome, must not be null

setHeaders

default void setHeaders(jakarta.servlet.http.HttpServletResponse response)

Set possible response headers.

Parameters:

response -