| Package | Description |
|---|---|
| com.helger.http.csp |
| Modifier and Type | Method and Description |
|---|---|
CSP2SourceList |
CSP2SourceList.addHash(com.helger.security.messagedigest.EMessageDigestAlgorithm eMDAlgo,
byte[] aHashValue)
Add the provided nonce value.
|
CSP2SourceList |
CSP2SourceList.addHash(com.helger.security.messagedigest.EMessageDigestAlgorithm eMDAlgo,
String sHashBase64Value)
Add the provided Base64 encoded hash value.
|
CSP2SourceList |
CSP2SourceList.addHost(com.helger.commons.url.ISimpleURL aHost)
Add a host
|
CSP2SourceList |
CSP2SourceList.addHost(String sHost)
Add a host
|
CSP2SourceList |
CSP2SourceList.addKeywordNone()
source expression 'none' represents an empty set of URIs
|
CSP2SourceList |
CSP2SourceList.addKeywordSelf()
source expression 'self' represents the set of URIs which are in the same
origin as the protected resource
|
CSP2SourceList |
CSP2SourceList.addKeywordUnsafeEval() |
CSP2SourceList |
CSP2SourceList.addKeywordUnsafeInline()
source expression 'unsafe-inline' represents content supplied inline in the
resource itself
|
CSP2SourceList |
CSP2SourceList.addMimeType(com.helger.commons.mime.IMimeType aMimeType)
Add a MIME type (for plugin-types)
|
CSP2SourceList |
CSP2SourceList.addNonce(byte[] aNonceValue)
Add the provided nonce value.
|
CSP2SourceList |
CSP2SourceList.addNonce(String sNonceBase64Value)
Add the provided Base64 encoded nonce value.
|
CSP2SourceList |
CSP2SourceList.addScheme(String sScheme)
Add a scheme
|
| Modifier and Type | Method and Description |
|---|---|
static CSP2Directive |
CSP2Directive.createChildSrc(CSP2SourceList aValue)
Defines valid sources for web workers and nested browsing contexts loaded
using elements such as <frame> and <iframe>
|
static CSP2Directive |
CSP2Directive.createConnectSrc(CSP2SourceList aValue)
Applies to XMLHttpRequest (AJAX), WebSocket or EventSource.
|
static CSP2Directive |
CSP2Directive.createDefaultSrc(CSP2SourceList aValue)
The default-src is the default policy for loading content such as JavaScript,
Images, CSS, Fonts, AJAX requests, Frames, HTML5 Media.
|
static CSP2Directive |
CSP2Directive.createFontSrc(CSP2SourceList aValue)
Defines valid sources of fonts.
|
static CSP2Directive |
CSP2Directive.createFormAction(CSP2SourceList aValue)
Defines valid sources that can be used as a HTML <form> action.
|
static CSP2Directive |
CSP2Directive.createFrameAncestors(CSP2SourceList aValue)
Defines valid sources for embedding the resource using <frame>
<iframe> <object> <embed> <applet>.
|
static CSP2Directive |
CSP2Directive.createFrameSrc(CSP2SourceList aValue)
Deprecated.
|
static CSP2Directive |
CSP2Directive.createImgSrc(CSP2SourceList aValue)
Defines valid sources of images.
|
static CSP2Directive |
CSP2Directive.createMediaSrc(CSP2SourceList aValue)
Defines valid sources of audio and video, eg HTML5 <audio>,
<video> elements.
|
static CSP2Directive |
CSP2Directive.createObjectSrc(CSP2SourceList aValue)
Defines valid sources of plugins, eg <object>, <embed> or
<applet>.
|
static CSP2Directive |
CSP2Directive.createPluginTypes(CSP2SourceList aValue)
Defines valid MIME types for plugins invoked via <object> and
<embed>.
|
static CSP2Directive |
CSP2Directive.createScriptSrc(CSP2SourceList aValue)
Defines valid sources of JavaScript.
|
static CSP2Directive |
CSP2Directive.createStyleSrc(CSP2SourceList aValue)
Defines valid sources of stylesheets.
|
| Constructor and Description |
|---|
CSP2Directive(String sName,
CSP2SourceList aValue) |
Copyright © 2016–2019 Philip Helger. All rights reserved.