@Contract(threading=IMMUTABLE_CONDITIONAL) public class PublicSuffixDomainFilter extends Object implements CommonCookieAttributeHandler
CookieAttributeHandler并利用其匹配方法从不匹配从黑名单的后缀。
可用于为跨站点攻击类型提供额外的安全性,方法是阻止来自明显的域不可公开的Cookie。
PublicSuffixList , PublicSuffixMatcher
| Constructor and Description |
|---|
PublicSuffixDomainFilter(CommonCookieAttributeHandler handler, PublicSuffixList suffixList) |
PublicSuffixDomainFilter(CommonCookieAttributeHandler handler, PublicSuffixMatcher publicSuffixMatcher) |
| Modifier and Type | Method and Description |
|---|---|
static CommonCookieAttributeHandler |
decorate(CommonCookieAttributeHandler handler, PublicSuffixMatcher publicSuffixMatcher) |
String |
getAttributeName() |
boolean |
match(Cookie cookie, CookieOrigin origin)
如果cookie的域名来自黑名单,则不要匹配。
|
void |
parse(SetCookie cookie, String value)
解析给定的cookie属性值并更新相应的 Cookie属性。
|
void |
validate(Cookie cookie, CookieOrigin origin)
对给定的属性值进行Peforms cookie验证。
|
public PublicSuffixDomainFilter(CommonCookieAttributeHandler handler, PublicSuffixMatcher publicSuffixMatcher)
public PublicSuffixDomainFilter(CommonCookieAttributeHandler handler, PublicSuffixList suffixList)
public boolean match(Cookie cookie, CookieOrigin origin)
match在接口
CookieAttributeHandler
cookie - Cookie匹配
origin - 与Cookie匹配的Cookie来源
true如果比赛成功;
false否则
public void parse(SetCookie cookie, String value) throws MalformedCookieException
CookieAttributeHandler复制
Cookie属性。
parse在接口
CookieAttributeHandler
cookie - Cookie待更新
value - 来自cookie响应头的cookie属性值
MalformedCookieException
public void validate(Cookie cookie, CookieOrigin origin) throws MalformedCookieException
CookieAttributeHandler复制
validate在界面
CookieAttributeHandler
cookie - Cookie验证
origin - 要验证的Cookie来源
MalformedCookieException - 如果cookie验证失败此属性
public String getAttributeName()
getAttributeName in interface
CommonCookieAttributeHandler
public static CommonCookieAttributeHandler decorate(CommonCookieAttributeHandler handler, PublicSuffixMatcher publicSuffixMatcher)
Copyright © 1999–2017 The Apache Software Foundation. All rights reserved.