org.htmlunit.csp

Class Policy

java.lang.Object

org.htmlunit.csp.Policy

public final class Policy
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static interface	Policy.PolicyErrorConsumer
static interface	Policy.PolicyListErrorConsumer
static class	Policy.Severity

Method Summary

Modifier and Type	Method and Description
boolean	allowsApplicationManifest(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsConnection(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsEval()
boolean	allowsExternalScript(Optional<String> nonce, Optional<String> integrity, Optional<URLWithScheme> scriptUrl, Optional<Boolean> parserInserted, Optional<URLWithScheme> origin)
boolean	allowsExternalStyle(Optional<String> nonce, Optional<URLWithScheme> styleUrl, Optional<URLWithScheme> origin)
boolean	allowsFont(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsFormAction(Optional<URLWithScheme> to, Optional<Boolean> redirected, Optional<URLWithScheme> redirectedTo, Optional<URLWithScheme> origin)
boolean	allowsFrame(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsFrameAncestor(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsImage(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsInlineScript(Optional<String> nonce, Optional<String> source, Optional<Boolean> parserInserted)
boolean	allowsInlineStyle(Optional<String> nonce, Optional<String> source)
boolean	allowsJavascriptUrlNavigation(Optional<String> source, Optional<URLWithScheme> origin)
boolean	allowsMedia(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsNavigation(Optional<URLWithScheme> to, Optional<Boolean> redirected, Optional<URLWithScheme> redirectedTo, Optional<URLWithScheme> origin)
boolean	allowsObject(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsPlugin(Optional<MediaType> mediaType)
boolean	allowsPrefetch(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
boolean	allowsScriptAsAttribute(Optional<String> source)
boolean	allowsStyleAsAttribute(Optional<String> source)
boolean	allowsWorker(Optional<URLWithScheme> source, Optional<URLWithScheme> origin)
Optional<SourceExpressionDirective>	baseUri()
boolean	blockAllMixedContent()
static boolean	doesUrlMatchSourceListInOrigin(URLWithScheme url, HostSourceDirective list, Optional<URLWithScheme> origin)
Optional<SourceExpressionDirective>	formAction()
Optional<FrameAncestorsDirective>	frameAncestors()
Optional<SourceExpressionDirective>	getFetchDirective(FetchDirectiveKind kind)
Optional<SourceExpressionDirective>	getGoverningDirectiveForEffectiveDirective(FetchDirectiveKind kind)
Optional<SourceExpressionDirective>	navigateTo()
static Policy	parseSerializedCSP(String serialized, Policy.PolicyErrorConsumer policyErrorConsumer)
static PolicyList	parseSerializedCSPList(String serialized, Policy.PolicyListErrorConsumer policyListErrorConsumer)
Optional<PluginTypesDirective>	pluginTypes()
Optional<RFC7230Token>	reportTo()
Optional<ReportUriDirective>	reportUri()
Optional<SandboxDirective>	sandbox()
String	toString()
boolean	upgradeInsecureRequests()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Detail

parseSerializedCSPList

public static PolicyList parseSerializedCSPList(String serialized,
                                                Policy.PolicyListErrorConsumer policyListErrorConsumer)

parseSerializedCSP

public static Policy parseSerializedCSP(String serialized,
                                        Policy.PolicyErrorConsumer policyErrorConsumer)

toString

public String toString()

Overrides:

toString in class Object

baseUri

public Optional<SourceExpressionDirective> baseUri()

blockAllMixedContent

public boolean blockAllMixedContent()

formAction

public Optional<SourceExpressionDirective> formAction()

frameAncestors

public Optional<FrameAncestorsDirective> frameAncestors()

navigateTo

public Optional<SourceExpressionDirective> navigateTo()

pluginTypes

public Optional<PluginTypesDirective> pluginTypes()

reportTo

public Optional<RFC7230Token> reportTo()

reportUri

public Optional<ReportUriDirective> reportUri()

sandbox

public Optional<SandboxDirective> sandbox()

upgradeInsecureRequests

public boolean upgradeInsecureRequests()

getFetchDirective

public Optional<SourceExpressionDirective> getFetchDirective(FetchDirectiveKind kind)

allowsExternalScript

public boolean allowsExternalScript(Optional<String> nonce,
                                    Optional<String> integrity,
                                    Optional<URLWithScheme> scriptUrl,
                                    Optional<Boolean> parserInserted,
                                    Optional<URLWithScheme> origin)

allowsInlineScript

public boolean allowsInlineScript(Optional<String> nonce,
                                  Optional<String> source,
                                  Optional<Boolean> parserInserted)

allowsScriptAsAttribute

public boolean allowsScriptAsAttribute(Optional<String> source)

allowsEval

public boolean allowsEval()

allowsNavigation

public boolean allowsNavigation(Optional<URLWithScheme> to,
                                Optional<Boolean> redirected,
                                Optional<URLWithScheme> redirectedTo,
                                Optional<URLWithScheme> origin)

allowsFormAction

public boolean allowsFormAction(Optional<URLWithScheme> to,
                                Optional<Boolean> redirected,
                                Optional<URLWithScheme> redirectedTo,
                                Optional<URLWithScheme> origin)

allowsJavascriptUrlNavigation

public boolean allowsJavascriptUrlNavigation(Optional<String> source,
                                             Optional<URLWithScheme> origin)

allowsExternalStyle

public boolean allowsExternalStyle(Optional<String> nonce,
                                   Optional<URLWithScheme> styleUrl,
                                   Optional<URLWithScheme> origin)

allowsInlineStyle

public boolean allowsInlineStyle(Optional<String> nonce,
                                 Optional<String> source)

allowsStyleAsAttribute

public boolean allowsStyleAsAttribute(Optional<String> source)

allowsFrame

public boolean allowsFrame(Optional<URLWithScheme> source,
                           Optional<URLWithScheme> origin)

allowsFrameAncestor

public boolean allowsFrameAncestor(Optional<URLWithScheme> source,
                                   Optional<URLWithScheme> origin)

allowsConnection

public boolean allowsConnection(Optional<URLWithScheme> source,
                                Optional<URLWithScheme> origin)

allowsFont

public boolean allowsFont(Optional<URLWithScheme> source,
                          Optional<URLWithScheme> origin)

allowsImage

public boolean allowsImage(Optional<URLWithScheme> source,
                           Optional<URLWithScheme> origin)

allowsApplicationManifest

public boolean allowsApplicationManifest(Optional<URLWithScheme> source,
                                         Optional<URLWithScheme> origin)

allowsMedia

public boolean allowsMedia(Optional<URLWithScheme> source,
                           Optional<URLWithScheme> origin)

allowsObject

public boolean allowsObject(Optional<URLWithScheme> source,
                            Optional<URLWithScheme> origin)

allowsPrefetch

public boolean allowsPrefetch(Optional<URLWithScheme> source,
                              Optional<URLWithScheme> origin)

allowsWorker

public boolean allowsWorker(Optional<URLWithScheme> source,
                            Optional<URLWithScheme> origin)

allowsPlugin

public boolean allowsPlugin(Optional<MediaType> mediaType)

getGoverningDirectiveForEffectiveDirective

public Optional<SourceExpressionDirective> getGoverningDirectiveForEffectiveDirective(FetchDirectiveKind kind)

doesUrlMatchSourceListInOrigin

public static boolean doesUrlMatchSourceListInOrigin(URLWithScheme url,
                                                     HostSourceDirective list,
                                                     Optional<URLWithScheme> origin)