1
0
mirror of synced 2026-08-05 17:57:15 +00:00

SEC-2098, SEC-2099: Created HeadersFilter

Created HeadersFilter for setting security headers added including a
bean definition parser for easy configuration of the headers. Enables
easy configuration for the X-Frame-Options, X-XSS-Protection and
X-Content-Type-Options headers. Also allows for additional headers to
be added.
This commit is contained in:
Marten Deinum
2012-12-21 14:56:18 +01:00
committed by Rob Winch
parent f5a30e55a3
commit 0adf5aea91
13 changed files with 573 additions and 5 deletions
@@ -30,6 +30,12 @@
<http-basic/>
<logout logout-success-url="/index.jsp"/>
<remember-me />
<headers>
<xss-protection />
<frame-options policy="DENY" />
<content-type-options/>
<header name="foo" value="bar"/>
</headers>
<custom-filter ref="switchUserProcessingFilter" position="SWITCH_USER_FILTER"/>
</http>