Package org.sdase.commons.server.security.validation

Class ServerFactorySecurityAdvice

java.lang.Object

org.sdase.commons.server.security.validation.ServerFactorySecurityAdvice

public class ServerFactorySecurityAdvice
extends java.lang.Object

Checks that secure defaults of used AbstractServerFactory instances are not modified and overwrites insecure defaults. This class checks for the risks identified in the security guide as:

• "Risiko: Root-Start"
• "Risiko: Ausnutzung von HTTP-Methoden"

Constructor Summary

Constructors

Constructor	Description
ServerFactorySecurityAdvice(io.dropwizard.server.ServerFactory serverFactory)

Method Summary

Modifier and Type	Method	Description
void	applySecureConfiguration()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ServerFactorySecurityAdvice

public ServerFactorySecurityAdvice(io.dropwizard.server.ServerFactory serverFactory)

Method Detail

applySecureConfiguration

public void applySecureConfiguration()