org.springframework.security.config.web.server

Class ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec

java.lang.Object

org.springframework.security.config.web.server.ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec

Enclosing class:

ServerHttpSecurity.HeaderSpec

public class ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec
extends java.lang.Object

Configures Content-Security-Policy response header.

Since:

5.1

See Also:

ServerHttpSecurity.HeaderSpec.contentSecurityPolicy(String)

Method Summary

Modifier and Type	Method and Description
ServerHttpSecurity.HeaderSpec	and() Allows method chaining to continue configuring the ServerHttpSecurity.
ServerHttpSecurity.HeaderSpec	reportOnly(boolean reportOnly) Whether to include the Content-Security-Policy-Report-Only header in the response.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

reportOnly

public ServerHttpSecurity.HeaderSpec reportOnly(boolean reportOnly)

Whether to include the Content-Security-Policy-Report-Only header in the response. Otherwise, defaults to the Content-Security-Policy header.

Parameters:

reportOnly - whether to only report policy violations

Returns:

the ServerHttpSecurity.HeaderSpec to continue configuring

and

public ServerHttpSecurity.HeaderSpec and()

Allows method chaining to continue configuring the ServerHttpSecurity.

Returns:

the ServerHttpSecurity.HeaderSpec to continue configuring