public class XSSProtectionValve extends ValveBase
This Valve is designed to add an
X-XSS-Protection : 1; mode=block header to the Response
object.
This is configured in the context.xml, or server.xml file using the following syntax:
<valve> <class-name>com.bluelotussoftware.tomcat.security.valves.XSSProtectionValve</class-name> </valve>
Lifecycle.SingleUseasyncSupported, container, containerLog, next, smmserverAFTER_DESTROY_EVENT, AFTER_INIT_EVENT, AFTER_START_EVENT, AFTER_STOP_EVENT, BEFORE_DESTROY_EVENT, BEFORE_INIT_EVENT, BEFORE_START_EVENT, BEFORE_STOP_EVENT, CONFIGURE_START_EVENT, CONFIGURE_STOP_EVENT, PERIODIC_EVENT, START_EVENT, STOP_EVENT| Constructor and Description |
|---|
XSSProtectionValve() |
| Modifier and Type | Method and Description |
|---|---|
void |
invoke(Request request,
Response response) |
backgroundProcess, getContainer, getDomainInternal, getNext, getObjectNameKeyProperties, initInternal, isAsyncSupported, setAsyncSupported, setContainer, setNext, startInternal, stopInternal, toStringdestroyInternal, getDomain, getObjectName, postDeregister, postRegister, preDeregister, preRegister, register, setDomain, unregisteraddLifecycleListener, destroy, findLifecycleListeners, fireLifecycleEvent, getState, getStateName, init, removeLifecycleListener, setState, setState, start, stoppublic XSSProtectionValve()
public void invoke(Request request, Response response) throws IOException, ServletException
Adds X-XSS-Protection : 1; mode=block header to the
Response object.
IOExceptionServletExceptionCopyright © 2017 Blue Lotus Software, LLC.. All rights reserved.