public interface Csrf
Cross Site Request Forgery (CSRF) interface with access to the CSRF header name
and the CSRF token value. Implementations of this interface are injectable
and accessible from EL via the
MvcContext
class as mvc.csrf
.- Since:
- 1.0
- See Also:
-
Nested Class Summary
Nested Classes -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final String
Property that can be used to configure the name of the HTTP header used for the CSRF token.static final String
Property that can be used to globally enable CSRF protection for an application.static final String
The default value forCSRF_HEADER_NAME
. -
Method Summary
-
Field Details
-
CSRF_PROTECTION
Property that can be used to globally enable CSRF protection for an application. Values of this property must be of typeCsrf.CsrfOptions
.- See Also:
-
CSRF_HEADER_NAME
Property that can be used to configure the name of the HTTP header used for the CSRF token.- See Also:
-
DEFAULT_CSRF_HEADER_NAME
The default value forCSRF_HEADER_NAME
.- See Also:
-
-
Method Details