org.sdase.commons.server.security.validation

Class HttpConnectorSecurityAdvice

java.lang.Object

org.sdase.commons.server.security.validation.HttpConnectorSecurityAdvice

public class HttpConnectorSecurityAdvice
extends java.lang.Object

Checks that secure defaults of used HttpConnectorFactory instances are not modified and overwrites insecure defaults. This class checks for the risks identified in the security guide as:

• "Risiko: Verlust der der Quell-IP-Adresse"
• "Risiko: Erkennung von vertraulichen Komponenten ... Entfernen von applikations-bezogenen Headern"

Constructor Summary

Constructors

Constructor and Description
HttpConnectorSecurityAdvice(io.dropwizard.server.ServerFactory serverFactory)

Method Summary

Modifier and Type	Method and Description
void	applySecureConfiguration()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HttpConnectorSecurityAdvice

public HttpConnectorSecurityAdvice(io.dropwizard.server.ServerFactory serverFactory)

Method Detail

applySecureConfiguration

public void applySecureConfiguration()