How to use
addAcceptedOrigin
method
in
org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

Best Java code snippets using org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener.addAcceptedOrigin (Showing top 2 results out of 315)

Add the Codota plugin to your IDE and get smart completions

private void myMethod () {
 Gson g =new Gson()
GsonBuilder gsonBuilder;gsonBuilder.create()
new GsonBuilder().create()
Smart code suggestions by Codota
}

@Override
public void init(WebApplication webApplication) {
  CsrfPreventionRequestCycleListener listener = new CsrfPreventionRequestCycleListener();
  listener.setConflictingOriginAction(props.getConflictingOriginAction());
  listener.setErrorCode(props.getErrorCode());
  listener.setErrorMessage(props.getErrorMessage());
  listener.setNoOriginAction(props.getNoOriginAction());
  for (String acceptedOrigin : props.getAcceptedOrigins()) {
    listener.addAcceptedOrigin(acceptedOrigin);
  }
  webApplication.getRequestCycleListeners().add(listener);
  
  wicketEndpointRepository.add(new WicketAutoConfig.Builder(this.getClass())
      .withDetail("properties", props)
      .build());
}

@Override
public void init(WebApplication webApplication) {
  CsrfPreventionRequestCycleListener listener = new CsrfPreventionRequestCycleListener();
  listener.setConflictingOriginAction(props.getConflictingOriginAction());
  listener.setErrorCode(props.getErrorCode());
  listener.setErrorMessage(props.getErrorMessage());
  listener.setNoOriginAction(props.getNoOriginAction());
  for (String acceptedOrigin : props.getAcceptedOrigins()) {
    listener.addAcceptedOrigin(acceptedOrigin);
  }
  webApplication.getRequestCycleListeners().add(listener);
  
  wicketEndpointRepository.add(new WicketAutoConfig.Builder(this.getClass())
      .withDetail("properties", props)
      .build());
}

Javadoc

Adds an origin (host name/domain name) to the white list. An origin is in the form of <domainname>.<TLD>, and can contain a subdomain. Every Origin header that matches a domain from the whitelist is accepted and not checked any further for CSRF issues. E.g. when example.com is in the white list, this allows requests from (i.e. with an Origin: header containing) example.com and blabla.example.com but rejects requests from blablaexample.com and example2.com.

Popular methods of CsrfPreventionRequestCycleListener

<init>
isChecked
Override to limit whether the request to the specific page should be checked for a possible CSRF att
abortHandler
Handles the case where an Origin HTTP header was not present or did not match the request origin, an
allowHandler
Handles the case where an Origin HTTP header was not present or did not match the request origin, an
checkRequest
Performs the check of the Origin or Referer header that is targeted at the page.
getSourceUri
Resolves the source URI from the request headers ( Origin or Referer).
getTargetUriFromRequest
Creates a RFC-6454 comparable URI from the request requested resource.
isEnabled
Dynamic override for enabling/disabling the CSRF detection. Might be handy for specific tenants in a
isLocalOrigin
Checks whether the Origin HTTP header of the request matches where the request came from.
isWhitelistedHost
Checks whether the domain part of the sourceUri ( Origin or Refererheader) is whitelisted.
matchingOrigin
Handles the case where an origin was checked and matched the request origin. Default action is to al
normalizeUri
Creates a RFC-6454 comparable URI from the uri string.

Popular in Java

Making http requests using okhttp
getOriginalFilename (MultipartFile)
Return the original filename in the client's filesystem.This may contain path information depending
getContentResolver (Context)
scheduleAtFixedRate (Timer)
Schedules the specified task for repeated fixed-rate execution, beginning after the specified delay.
FileInputStream (java.io)
A FileInputStream obtains input bytes from a file in a file system. What files are available depends
FileNotFoundException (java.io)
Thrown when a file specified by a program cannot be found.
Runnable (java.lang)
Represents a command that can be executed. Often used to run code in a different Thread.
Stream (java.util.stream)
A sequence of elements supporting sequential and parallel aggregate operations. The following exampl
JLabel (javax.swing)
Join (org.hibernate.mapping)

How to use addAcceptedOriginmethodin org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener

Best Java code snippets using org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener.addAcceptedOrigin (Showing top 2 results out of 315)

How to use
addAcceptedOrigin
method
in
org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener