Package org.apache.wicket.protocol.ws

Class WebSocketAwareCsrfPreventionRequestCycleListener

  • All Implemented Interfaces:
    org.apache.wicket.request.cycle.IRequestCycleListener
    public class WebSocketAwareCsrfPreventionRequestCycleListener
extends org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener
    A specialization of CsrfPreventionRequestCycleListener that should be used when the application uses Web Sockets.

    The HTTP upgrade request brings Origin in its headers, but any Web socket frame doesn't bring it so WebSocketRequestHandler and WebSocketMessageBroadcastHandler should be ignored.

    • Nested Class Summary

      • Nested classes/interfaces inherited from class org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

        org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener.CsrfAction

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected boolean isChecked​(org.apache.wicket.request.IRequestHandler handler)  

      • Methods inherited from class org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

        abortHandler, addAcceptedOrigin, allowHandler, checkRequest, getSourceUri, getTargetUriFromRequest, isChecked, isEnabled, isLocalOrigin, isWhitelistedHost, matchingOrigin, normalizeUri, onAborted, onAllowed, onBeginRequest, onMatchingOrigin, onRequestHandlerResolved, onSuppressed, onWhitelisted, setConflictingOriginAction, setErrorCode, setErrorMessage, setNoOriginAction, suppressHandler, unwrap, whitelistedHandler

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

      • Methods inherited from interface org.apache.wicket.request.cycle.IRequestCycleListener

        onDetach, onEndRequest, onException, onExceptionRequestHandlerResolved, onRequestHandlerExecuted, onRequestHandlerScheduled, onUrlMapped

    • Constructor Detail

      • WebSocketAwareCsrfPreventionRequestCycleListener

        public WebSocketAwareCsrfPreventionRequestCycleListener()

    • Method Detail

      • isChecked

        protected boolean isChecked​(org.apache.wicket.request.IRequestHandler handler)
        Overrides:
        isChecked in class org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener