org.apache.wicket.protocol.ws

Class WebSocketAwareCsrfPreventionRequestCycleListener

java.lang.Object

org.apache.wicket.request.cycle.AbstractRequestCycleListener

org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

org.apache.wicket.protocol.ws.WebSocketAwareCsrfPreventionRequestCycleListener

All Implemented Interfaces:

IRequestCycleListener

public class WebSocketAwareCsrfPreventionRequestCycleListener
extends CsrfPreventionRequestCycleListener

A specialization of CsrfPreventionRequestCycleListener that should be used when the application uses Web Sockets.

The HTTP upgrade request brings Origin in its headers, but any Web socket frame doesn't bring it so WebSocketRequestHandler and WebSocketMessageBroadcastHandler should be ignored.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

CsrfPreventionRequestCycleListener.CsrfAction

Constructor Summary

Constructors

Constructor and Description
WebSocketAwareCsrfPreventionRequestCycleListener()

Method Summary

Methods

Modifier and Type	Method and Description
protected boolean	isChecked(org.apache.wicket.request.IRequestHandler handler)

Methods inherited from class org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

abortHandler, addAcceptedOrigin, allowHandler, checkRequest, getSourceUri, getTargetUriFromRequest, isChecked, isEnabled, isLocalOrigin, isWhitelistedHost, matchingOrigin, normalizeUri, onAborted, onAllowed, onBeginRequest, onMatchingOrigin, onRequestHandlerResolved, onSuppressed, onWhitelisted, setConflictingOriginAction, setErrorCode, setErrorMessage, setNoOriginAction, suppressHandler, unwrap, whitelistedHandler

Methods inherited from class org.apache.wicket.request.cycle.AbstractRequestCycleListener

onDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMapped

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.wicket.request.cycle.IRequestCycleListener

onDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMapped

Constructor Detail

WebSocketAwareCsrfPreventionRequestCycleListener

public WebSocketAwareCsrfPreventionRequestCycleListener()

Method Detail

isChecked

protected boolean isChecked(org.apache.wicket.request.IRequestHandler handler)

Overrides:

isChecked in class CsrfPreventionRequestCycleListener