Package hudson.security.csrf
Class CrumbFilter
- java.lang.Object
-
- hudson.security.csrf.CrumbFilter
-
- All Implemented Interfaces:
javax.servlet.Filter
public class CrumbFilter extends Object implements javax.servlet.Filter
Checks for and validates crumbs on requests that cause state changes, to protect against cross site request forgeries.- Author:
- dty
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description static classCrumbFilter.ErrorCustomizer
-
Constructor Summary
Constructors Constructor Description CrumbFilter()
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description voiddestroy()voiddoFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)CrumbIssuergetCrumbIssuer()Because servlet containers generally don't specify the ordering of the initialization (and different implementations indeed do this differently --- See JENKINS-3878), we cannot use Hudson to the CrumbIssuer into CrumbFilter eagerly.voidinit(javax.servlet.FilterConfig filterConfig)protected static booleanisMultipart(javax.servlet.http.HttpServletRequest request)
-
-
-
Method Detail
-
getCrumbIssuer
public CrumbIssuer getCrumbIssuer()
Because servlet containers generally don't specify the ordering of the initialization (and different implementations indeed do this differently --- See JENKINS-3878), we cannot use Hudson to the CrumbIssuer into CrumbFilter eagerly.
-
init
public void init(javax.servlet.FilterConfig filterConfig) throws javax.servlet.ServletException- Specified by:
initin interfacejavax.servlet.Filter- Throws:
javax.servlet.ServletException
-
doFilter
public void doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain) throws IOException, javax.servlet.ServletException- Specified by:
doFilterin interfacejavax.servlet.Filter- Throws:
IOExceptionjavax.servlet.ServletException
-
isMultipart
protected static boolean isMultipart(javax.servlet.http.HttpServletRequest request)
-
destroy
public void destroy()
- Specified by:
destroyin interfacejavax.servlet.Filter
-
-