# Package org.appng.core.controller.filter

Contains the Servlet-`Filter`s used by appNG.

See: Description

- Class Summary
  Class | Description
  --- | ---
  CsrfSetupFilter | A `WebListener` responsible for CSRF-protection.
  EnvironmentFilter | A `Filter` that creates a `DefaultEnvironment` for the current `HttpServletRequest`/ `HttpServletResponse` and adds it as an attribute to the current request.
  JspExtensionFilter | A `Filter` that performs a search-and-replace on the given content of the `ServletResponse`. It searches for paths (relative or absolute paths that match the `Site`'s domain) that end with ".jsp" (respectively the configured file ending for JSPs) and removes the ".jsp" ending from that path. Before:
  KeycloakLoginFilter | A `Filter` that looks for a `KeycloakPrincipal` (respectively an `AccessToken`) in the current `HttpServletRequest`.
  MetricsFilter | A filter providing some prometheus metrics.
  MSOfficeUserAgentFilter | This `Filter` is a workaround for a bug in Microsoft Office which causes the http-session to get lost if a link is being opened from inside a Microsoft Office document. See KB 899927 for details.
  PageCacheFilter | A `Filter` which caches responses in form of an `CachedResponse`
  RedirectFilter | A `Filter` extending UrlRewriteFilter that supports configuration per `Site`.
  RedirectFilter.UrlRewriteConfig |
  XSSFilter | A servlet filter to prevent XSS attacks. Inspired by https://dzone.com/articles/stronger-anti-cross-site https://jsoup.org/cookbook/cleaning-html/safelist-sanitizer

## Package org.appng.core.controller.filter Description

Contains the Servlet-`Filter`s used by appNG.

Copyright © 2011–2023 aiticon GmbH. All rights reserved.