| Interface | Description |
|---|---|
| CspNonceReader |
Reads the nonce value using the ValueStack,
StrutsCspNonceReader is the default implementation |
| CspSettings |
CspSettings interface used by the
CspInterceptor to add the CSP header to the response. |
| Class | Description |
|---|---|
| CspInterceptor |
Interceptor that implements Content Security Policy on incoming requests used to protect against
common XSS and data injection attacks.
|
| CspNonceReader.NonceValue | |
| DefaultCspSettings |
Default implementation of
CspSettings. |
| StrutsCspNonceReader |
Reads nonce value from session or request attribute.
|
| Enum | Description |
|---|---|
| CspNonceSource |
Source of the nonce value
|
Copyright © 2000–2025 Apache Software Foundation. All rights reserved.