Package io.jenkins.plugins.csp
Class ContentSecurityPolicyRootAction
java.lang.Object
hudson.model.InvisibleAction
io.jenkins.plugins.csp.ContentSecurityPolicyRootAction
- All Implemented Interfaces:
ExtensionPoint
,Action
,ModelObject
,RootAction
,UnprotectedRootAction
@Extension
@Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class)
@Symbol("contentSecurityPolicyRootAction")
public class ContentSecurityPolicyRootAction
extends InvisibleAction
implements UnprotectedRootAction
Reporting endpoint for CSP violations.
StaplerRequest2.getRestOfPath()
is used to associate violations with
the view they occur in; ContentSecurityPolicyDecorator
needs to have a dynamic report
URL for that.
While this is an UnprotectedRootAction
, only submissions with correct HMAC
from Context.encodeContext(Object, Authentication, String)
will be accepted.
-
Nested Class Summary
Nested ClassesNested classes/interfaces inherited from interface hudson.ExtensionPoint
ExtensionPoint.LegacyInstancesAreScopedToHudson
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionorg.kohsuke.stapler.HttpResponse
doDynamic
(org.kohsuke.stapler.StaplerRequest2 req) Methods inherited from class hudson.model.InvisibleAction
getDisplayName, getIconFileName
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
Methods inherited from interface hudson.model.Action
getDisplayName, getIconFileName
-
Field Details
-
URL
- See Also:
-
LOGGER
-
-
Constructor Details
-
ContentSecurityPolicyRootAction
public ContentSecurityPolicyRootAction()
-
-
Method Details
-
getUrlName
- Specified by:
getUrlName
in interfaceAction
- Overrides:
getUrlName
in classInvisibleAction
-
doDynamic
@POST public org.kohsuke.stapler.HttpResponse doDynamic(org.kohsuke.stapler.StaplerRequest2 req)
-