org.apache.struts2.interceptor

Class FetchMetadataInterceptor

java.lang.Object

org.apache.struts2.interceptor.AbstractInterceptor

com.opensymphony.xwork2.interceptor.AbstractInterceptor

org.apache.struts2.interceptor.FetchMetadataInterceptor

All Implemented Interfaces:

Serializable, ConditionalInterceptor, Interceptor

public class FetchMetadataInterceptor
extends AbstractInterceptor

Interceptor that implements Fetch Metadata policy on incoming requests used to protect against CSRF, XSSI, and cross-origin information leaks. Uses StrutsResourceIsolationPolicy to filter the requests allowed to be processed.

See Also:

https://web.dev/fetch-metadata/, https://www.w3.org/TR/fetch-metadata/, Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from interface com.opensymphony.xwork2.interceptor.ConditionalInterceptor

ConditionalInterceptor.LegacyAdapter

Constructor Summary

Constructors

Constructor and Description
FetchMetadataInterceptor()

Method Summary

Modifier and Type	Method and Description
String	intercept(ActionInvocation invocation) Override to handle interception
void	setExemptedPaths(String paths)

Methods inherited from class com.opensymphony.xwork2.interceptor.AbstractInterceptor

intercept, shouldIntercept, shouldIntercept

Methods inherited from class org.apache.struts2.interceptor.AbstractInterceptor

destroy, init, setDisabled

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.opensymphony.xwork2.interceptor.ConditionalInterceptor

adapt

Methods inherited from interface com.opensymphony.xwork2.interceptor.Interceptor

adapt

Methods inherited from interface org.apache.struts2.interceptor.Interceptor

destroy, init

Constructor Detail

FetchMetadataInterceptor

public FetchMetadataInterceptor()

Method Detail

setExemptedPaths

public void setExemptedPaths(String paths)

intercept

public String intercept(ActionInvocation invocation)
                 throws Exception

Description copied from class: AbstractInterceptor

Override to handle interception

Specified by:

intercept in class AbstractInterceptor

Throws:

Exception