Uses of Class
de.cuioss.http.security.config.SecurityConfigurationBuilder
Packages that use SecurityConfigurationBuilder
Package
Description
Configuration management for HTTP security validation.
-
Uses of SecurityConfigurationBuilder in de.cuioss.http.security.config
Methods in de.cuioss.http.security.config that return SecurityConfigurationBuilderModifier and TypeMethodDescriptionSecurityConfigurationBuilder.addAllowedContentType(String contentType) Adds a content type to the allowed list.SecurityConfigurationBuilder.addAllowedHeaderName(String headerName) Adds a header name to the allowed list.SecurityConfigurationBuilder.addBlockedContentType(String contentType) Adds a content type to the blocked list.SecurityConfigurationBuilder.addBlockedHeaderName(String headerName) Adds a header name to the blocked list.SecurityConfigurationBuilder.allowControlCharacters(boolean allow) Sets whether control characters are allowed in content.SecurityConfigurationBuilder.allowDoubleEncoding(boolean allow) Sets whether double URL encoding is allowed.SecurityConfigurationBuilder.allowedContentTypes(@Nullable Set<String> contentTypes) Sets the complete list of allowed content types.SecurityConfigurationBuilder.allowedHeaderNames(@Nullable Set<String> headerNames) Sets the complete list of allowed header names.SecurityConfigurationBuilder.allowExtendedAscii(boolean allow) Sets whether extended ASCII characters (128-255) are allowed in content.SecurityConfigurationBuilder.allowNullBytes(boolean allow) Sets whether null bytes are allowed in content.SecurityConfigurationBuilder.allowPathTraversal(boolean allow) Sets whether path traversal patterns (../) are allowed.SecurityConfigurationBuilder.blockedContentTypes(Set<String> contentTypes) Sets the complete list of blocked content types.SecurityConfigurationBuilder.blockedHeaderNames(Set<String> headerNames) Sets the complete list of blocked header names.SecurityConfigurationBuilder.bodySecurity(long maxSize, @Nullable Set<String> allowedTypes) Configures body security settings in one call.static SecurityConfigurationBuilderSecurityConfiguration.builder()Creates a builder for constructing SecurityConfiguration instances.SecurityConfigurationBuilder.caseSensitiveComparison(boolean caseSensitive) Sets whether string comparisons should be case-sensitive.SecurityConfigurationBuilder.cookieSecurity(boolean requireSecure, boolean requireHttpOnly, int maxCount, int maxNameLength, int maxValueLength) Configures cookie security settings in one call.SecurityConfigurationBuilder.encoding(boolean allowNulls, boolean allowControls, boolean allowHighBit, boolean normalizeUni) Configures encoding security settings in one call.SecurityConfigurationBuilder.failOnSuspiciousPatterns(boolean fail) Sets whether to fail on detection of suspicious patterns.SecurityConfigurationBuilder.headerSecurity(int maxCount, int maxNameLength, int maxValueLength) Configures header security settings in one call.SecurityConfigurationBuilder.logSecurityViolations(boolean log) Sets whether to log security violations.SecurityConfigurationBuilder.maxBodySize(long maxSize) Sets the maximum body size in bytes.SecurityConfigurationBuilder.maxCookieCount(int maxCount) Sets the maximum number of cookies allowed.SecurityConfigurationBuilder.maxCookieNameLength(int maxLength) Sets the maximum length for cookie names.SecurityConfigurationBuilder.maxCookieValueLength(int maxLength) Sets the maximum length for cookie values.SecurityConfigurationBuilder.maxHeaderCount(int maxCount) Sets the maximum number of HTTP headers allowed.SecurityConfigurationBuilder.maxHeaderNameLength(int maxLength) Sets the maximum length for header names.SecurityConfigurationBuilder.maxHeaderValueLength(int maxLength) Sets the maximum length for header values.SecurityConfigurationBuilder.maxParameterCount(int maxCount) Sets the maximum number of query parameters allowed.SecurityConfigurationBuilder.maxParameterNameLength(int maxLength) Sets the maximum length for parameter names.SecurityConfigurationBuilder.maxParameterValueLength(int maxLength) Sets the maximum length for parameter values.SecurityConfigurationBuilder.maxPathLength(int maxLength) Sets the maximum allowed path length.SecurityConfigurationBuilder.normalizeUnicode(boolean normalize) Sets whether Unicode normalization should be performed.SecurityConfigurationBuilder.parameterSecurity(int maxCount, int maxNameLength, int maxValueLength) Configures parameter security settings in one call.SecurityConfigurationBuilder.pathSecurity(int maxLength, boolean allowTraversal) Configures path security settings in one call.SecurityConfigurationBuilder.policies(boolean caseSensitive, boolean failOnSuspicious, boolean logViolations) Configures general policy settings in one call.SecurityConfigurationBuilder.requireHttpOnlyCookies(boolean require) Sets whether all cookies must have the HttpOnly flag.SecurityConfigurationBuilder.requireSecureCookies(boolean require) Sets whether all cookies must have the Secure flag.