org.sdase.commons.server.security.validation

Class CustomErrorHandlerSecurityAdvice

java.lang.Object

org.sdase.commons.server.security.validation.CustomErrorHandlerSecurityAdvice

public class CustomErrorHandlerSecurityAdvice
extends java.lang.Object

Checks that custom error mappers are registered by the JacksonConfigurationBundle. The check is indirectly performed by checking that the bundle itself is registered. This class checks for the risks identified in the security guide as:

• "Risiko: Erkennung von vertraulichen Komponenten ... Entfernen von applikations-bezogenen Fehlermeldungen"
• "Risiko: Erkennung von vertraulichen Komponenten ... Zentrales Abfangen aller Exceptions"

Constructor Summary

Constructors

Constructor and Description
CustomErrorHandlerSecurityAdvice(io.dropwizard.server.ServerFactory serverFactory, io.dropwizard.setup.Bootstrap<?> bootstrap)

Method Summary

Modifier and Type	Method and Description
void	applySecureConfiguration()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CustomErrorHandlerSecurityAdvice

public CustomErrorHandlerSecurityAdvice(io.dropwizard.server.ServerFactory serverFactory,
                                        io.dropwizard.setup.Bootstrap<?> bootstrap)

Method Detail

applySecureConfiguration

public void applySecureConfiguration()