Examples of XFrameOptionsHeaderWriter

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

190
191
192
193
194
195
196
     * {@link XFrameOptionsHeaderWriter} directly.
     *
     * @return the {@link HeadersConfigurer} for additional customizations
     */
    public HeadersConfigurer<H> frameOptions() {
        return addHeaderWriter(new XFrameOptionsHeaderWriter());
    }
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

52
53
54
55
56
57
58
        response = new MockHttpServletResponse();
    }

    @Test(expected = IllegalArgumentException.class)
    public void constructorNullMode() {
        new XFrameOptionsHeaderWriter((XFrameOptionsMode)null);
    }
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

57
58
59
60
61
62
63
        new XFrameOptionsHeaderWriter((XFrameOptionsMode)null);
    }

    @Test(expected = IllegalArgumentException.class)
    public void constructorAllowFromNoAllowFromStrategy() {
        new XFrameOptionsHeaderWriter(XFrameOptionsMode.ALLOW_FROM);
    }
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

62
63
64
65
66
67
68
        new XFrameOptionsHeaderWriter(XFrameOptionsMode.ALLOW_FROM);
    }

    @Test(expected = IllegalArgumentException.class)
    public void constructorNullAllowFromStrategy() {
        new XFrameOptionsHeaderWriter((AllowFromStrategy)null);
    }
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

67
68
69
70
71
72
73
74
75
76
77
        new XFrameOptionsHeaderWriter((AllowFromStrategy)null);
    }

    @Test
    public void writeHeadersAllowFromReturnsNull() {
        writer = new XFrameOptionsHeaderWriter(strategy);

        writer.writeHeaders(request, response);

        assertThat(response.getHeaderNames().isEmpty()).isTrue();
    }
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

78
79
80
81
82
83
84
85
86
87
88
    @Test
    public void writeHeadersAllowFrom() {
        String allowFromValue = "https://example.com/";
        when(strategy.getAllowFromValue(request)).thenReturn(allowFromValue);
        writer = new XFrameOptionsHeaderWriter(strategy);

        writer.writeHeaders(request, response);

        assertThat(response.getHeaderNames().size()).isEqualTo(1);
        assertThat(response.getHeader(XFrameOptionsHeaderWriter.XFRAME_OPTIONS_HEADER)).isEqualTo("ALLOW-FROM " + allowFromValue);
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

88
89
90
91
92
93
94
95
96
97
98
        assertThat(response.getHeader(XFrameOptionsHeaderWriter.XFRAME_OPTIONS_HEADER)).isEqualTo("ALLOW-FROM " + allowFromValue);
    }

    @Test
    public void writeHeadersDeny() {
        writer = new XFrameOptionsHeaderWriter(XFrameOptionsMode.DENY);

        writer.writeHeaders(request, response);

        assertThat(response.getHeaderNames().size()).isEqualTo(1);
        assertThat(response.getHeader(XFrameOptionsHeaderWriter.XFRAME_OPTIONS_HEADER)).isEqualTo("DENY");
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

99
100
101
102
103
104
105
106
107
108
109
    }


    @Test
    public void writeHeadersSameOrigin() {
        writer = new XFrameOptionsHeaderWriter(XFrameOptionsMode.SAMEORIGIN);

        writer.writeHeaders(request, response);

        assertThat(response.getHeaderNames().size()).isEqualTo(1);
        assertThat(response.getHeader(XFrameOptionsHeaderWriter.XFRAME_OPTIONS_HEADER)).isEqualTo("SAMEORIGIN");
View Full Code Here

Examples of org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

49
50
51
52
53
54
55
56
57
58
59
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .headers() // TODO: (REWRITE) This enables opening javamelody in an iframe, see https://jira.spring.io/browse/SEC-2501 and https://jira.spring.io/browse/SPR-11496
                .addHeaderWriter(new XFrameOptionsHeaderWriter(XFrameOptionsHeaderWriter.XFrameOptionsMode.SAMEORIGIN))
                .and()
            .requiresChannel()
                .anyRequest().requiresSecure()
                .and()
            .authorizeRequests()
View Full Code Here
TOP
Copyright © 2018 www.massapi.com. All rights reserved.
All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.