Package swiss.trustbroker.config.dto

Class ContentSecurityPolicies

java.lang.Object

swiss.trustbroker.config.dto.ContentSecurityPolicies

public class ContentSecurityPolicies
extends Object

Calculating unsafe-hashes: echo -n 'myscript()' | openssl sha256 -binary | openssl base64 Risks: A thus whitelisted script could be injected in other parts of the page by an attacker. We use this for the scripts generated by libraries (SAML auto-submitting form).

See Also:

• Using a hash with CSP

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ContentSecurityPolicies.ContentSecurityPoliciesBuilder

Constructor Summary

Constructors

Constructor	Description
ContentSecurityPolicies()
ContentSecurityPolicies(String fallback, String oidc, String saml, String frontend)	Creates a new ContentSecurityPolicies instance.

Method Summary

Modifier and Type	Method	Description
static ContentSecurityPolicies.ContentSecurityPoliciesBuilder	builder()
protected boolean	canEqual(Object other)
boolean	equals(Object o)
String	getFallback()	Default CSP configuration.
String	getFrontend()	CSP configuration for frontend URLs.
String	getOidc()	CSP configuration for OIDC.
String	getSaml()	CSP configuration for SAML.
int	hashCode()
void	setFallback(String fallback)	Default CSP configuration.
void	setFrontend(String frontend)	CSP configuration for frontend URLs.
void	setOidc(String oidc)	CSP configuration for OIDC.
void	setSaml(String saml)	CSP configuration for SAML.
String	toString()

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Details

ContentSecurityPolicies

public ContentSecurityPolicies()

ContentSecurityPolicies

public ContentSecurityPolicies(String fallback,
 String oidc,
 String saml,
 String frontend)

Creates a new ContentSecurityPolicies instance.

Parameters:

fallback - Default CSP configuration.
Default: default-src 'self'

oidc - CSP configuration for OIDC.
Default: null

saml - CSP configuration for SAML.
Default: null

frontend - CSP configuration for frontend URLs.
Default: null

Method Details

builder

public static ContentSecurityPolicies.ContentSecurityPoliciesBuilder builder()

getFallback

public String getFallback()

Default CSP configuration.
Default: default-src 'self'

getOidc

public String getOidc()

CSP configuration for OIDC.
Default: null

getSaml

public String getSaml()

CSP configuration for SAML.
Default: null

getFrontend

public String getFrontend()

CSP configuration for frontend URLs.
Default: null

setFallback

public void setFallback(String fallback)

Default CSP configuration.
Default: default-src 'self'

setOidc

public void setOidc(String oidc)

CSP configuration for OIDC.
Default: null

setSaml

public void setSaml(String saml)

CSP configuration for SAML.
Default: null

setFrontend

public void setFrontend(String frontend)

CSP configuration for frontend URLs.
Default: null

equals

public boolean equals(Object o)

Overrides:

equals in class Object

canEqual

protected boolean canEqual(Object other)

hashCode

public int hashCode()

Overrides:

hashCode in class Object

toString

public String toString()

Overrides:

toString in class Object