public class WebSocketAwareCsrfPreventionRequestCycleListener extends CsrfPreventionRequestCycleListener
CsrfPreventionRequestCycleListener that should be used when
the application uses Web Sockets.
The HTTP upgrade request brings Origin in its headers, but any Web socket frame doesn't
bring it so WebSocketRequestHandler and WebSocketMessageBroadcastHandler
should be ignored.
CsrfPreventionRequestCycleListener.CsrfAction| Constructor and Description |
|---|
WebSocketAwareCsrfPreventionRequestCycleListener() |
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
isChecked(org.apache.wicket.request.IRequestHandler handler) |
abortHandler, addAcceptedOrigin, allowHandler, checkRequest, getSourceUri, getTargetUriFromRequest, isChecked, isEnabled, isLocalOrigin, isWhitelistedHost, matchingOrigin, normalizeUri, onAborted, onAllowed, onBeginRequest, onMatchingOrigin, onRequestHandlerResolved, onSuppressed, onWhitelisted, setConflictingOriginAction, setErrorCode, setErrorMessage, setNoOriginAction, suppressHandler, unwrap, whitelistedHandleronDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMappedclone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitonDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMappedpublic WebSocketAwareCsrfPreventionRequestCycleListener()
protected boolean isChecked(org.apache.wicket.request.IRequestHandler handler)
isChecked in class CsrfPreventionRequestCycleListenerCopyright © 2006–2018 Apache Software Foundation. All rights reserved.