A C D F G I L O P R S T

A

AbstractSecurityFilter - Class in org.apereo.cas.security

This is AbstractSecurityFilter.

AbstractSecurityFilter() - Constructor for class org.apereo.cas.security.AbstractSecurityFilter

AddResponseHeadersFilter - Class in org.apereo.cas.security

Allows users to easily inject the default security headers to assist in protecting the application.

AddResponseHeadersFilter() - Constructor for class org.apereo.cas.security.AddResponseHeadersFilter

ALLOW_MULTI_VALUED_PARAMETERS - Static variable in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

The name of the optional Filter init-param specifying whether the checked request parameters are allowed to have multiple values.

C

CHARACTERS_TO_FORBID - Static variable in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

The name of the optional Filter init-param specifying what characters are forbidden in the checked request parameters.

configureLogging(Handler, Logger) - Static method in class org.apereo.cas.security.FilterUtils

configureLogging(String, Logger) - Static method in class org.apereo.cas.security.FilterUtils

D

decideInsertCacheControlHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

decideInsertContentSecurityPolicyHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

decideInsertStrictTransportSecurityHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

decideInsertXContentTypeOptionsHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

decideInsertXFrameOptionsHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

decideInsertXSSProtectionHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

DEFAULT_CHARACTERS_BLOCKED - Static variable in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

The set of Characters blocked by default on checked parameters.

destroy() - Method in class org.apereo.cas.security.AddResponseHeadersFilter

destroy() - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

destroy() - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.apereo.cas.security.AddResponseHeadersFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

F

FilterUtils - Class in org.apereo.cas.security

Utility classes.

G

getLoggerHandlerClassName() - Method in class org.apereo.cas.security.AbstractSecurityFilter

I

init(FilterConfig) - Method in class org.apereo.cas.security.AddResponseHeadersFilter

init(FilterConfig) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

init(FilterConfig) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertCacheControlHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertCacheControlHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertContentSecurityPolicyHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertContentSecurityPolicyHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertStrictTransportSecurityHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertStrictTransportSecurityHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXContentTypeOptionsHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXContentTypeOptionsHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXFrameOptionsHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXFrameOptionsHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXSSProtectionHeader(HttpServletResponse, HttpServletRequest) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

insertXSSProtectionHeader(HttpServletResponse, HttpServletRequest, String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

L

logException(Logger, Exception) - Static method in class org.apereo.cas.security.FilterUtils

LOGGER_HANDLER_CLASS_NAME - Static variable in class org.apereo.cas.security.AbstractSecurityFilter

Describes the handler that should be used for logging.

O

ONLY_POST_PARAMETERS - Static variable in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

The name of the optional Filter init-param specifying what request parameters ought to be send via POST requests only.

org.apereo.cas.security - package org.apereo.cas.security

P

PARAMETERS_TO_CHECK - Static variable in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

The name of the optional Filter init-param specifying what request parameters ought to be checked.

parseStringToBooleanDefaultingToFalse(String) - Static method in class org.apereo.cas.security.FilterUtils

Parse a String to a boolean.

R

RequestParameterPolicyEnforcementFilter - Class in org.apereo.cas.security

This is a Java Servlet Filter that examines specified Request Parameters as to whether they contain specified characters and as to whether they are multivalued throws an Exception if they do not meet configured rules.

RequestParameterPolicyEnforcementFilter() - Constructor for class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

ResponseHeadersEnforcementFilter - Class in org.apereo.cas.security

Allows users to easily inject the default security headers to assist in protecting the application.

ResponseHeadersEnforcementFilter() - Constructor for class org.apereo.cas.security.ResponseHeadersEnforcementFilter

S

setAllowMultiValueParameters(boolean) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

setCharactersToForbid(Set<Character>) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

setContentSecurityPolicy(String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setEnableCacheControl(boolean) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setEnableStrictTransportSecurity(boolean) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setEnableXContentTypeOptions(boolean) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setEnableXFrameOptions(boolean) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setEnableXSSProtection(boolean) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setHeadersMap(Map<String, String>) - Method in class org.apereo.cas.security.AddResponseHeadersFilter

setLoggerHandlerClassName(String) - Method in class org.apereo.cas.security.AbstractSecurityFilter

setLoggerHandlerClassName(String) - Method in class org.apereo.cas.security.AddResponseHeadersFilter

setLoggerHandlerClassName(String) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

setLoggerHandlerClassName(String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setOnlyPostParameters(Set<String>) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

setParametersToCheck(Set<String>) - Method in class org.apereo.cas.security.RequestParameterPolicyEnforcementFilter

setThrowOnErrors(boolean) - Static method in class org.apereo.cas.security.FilterUtils

setXFrameOptions(String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

setXSSProtection(String) - Method in class org.apereo.cas.security.ResponseHeadersEnforcementFilter

T

throwOnErrors - Static variable in class org.apereo.cas.security.FilterUtils

A C D F G I L O P R S T