Package org.appng.core.controller.filter
Contains the Servlet-
Filter
s used by appNG.-
Class Summary Class Description CsrfSetupFilter AWebListener
responsible for CSRF-protection.JspExtensionFilter AFilter
that performs a search-and-replace on the given content of theServletResponse
.
It searches for paths (relative or absolute paths that match theSite
's domain) that end with ".jsp" (respectively the configured file ending for JSPs) and removes the ".jsp" ending from that path.
Before:KeycloakLoginFilter AFilter
that looks for aKeycloakPrincipal
(respectively anAccessToken
) in the currentHttpServletRequest
.MSOfficeUserAgentFilter ThisFilter
is a workaround for a bug in Microsoft Office which causes the http-session to get lost if a link is being opened from inside a Microsoft Office document.
See KB 899927 for details.PageCacheFilter AFilter
which caches responses in form of anCachedResponse
RedirectFilter RedirectFilter.UrlRewriteConfig XSSFilter A servlet filter to prevent XSS attacks.
Inspired by https://dzone.com/articles/stronger-anti-cross-site https://jsoup.org/cookbook/cleaning-html/safelist-sanitizer