|
|
|
@ -16,10 +16,6 @@ |
|
|
|
|
|
|
|
|
|
|
|
package org.springframework.security.web.firewall; |
|
|
|
package org.springframework.security.web.firewall; |
|
|
|
|
|
|
|
|
|
|
|
import org.springframework.http.HttpMethod; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
import javax.servlet.http.HttpServletRequest; |
|
|
|
|
|
|
|
import javax.servlet.http.HttpServletResponse; |
|
|
|
|
|
|
|
import java.util.Arrays; |
|
|
|
import java.util.Arrays; |
|
|
|
import java.util.Collection; |
|
|
|
import java.util.Collection; |
|
|
|
import java.util.Collections; |
|
|
|
import java.util.Collections; |
|
|
|
@ -27,6 +23,10 @@ import java.util.HashSet; |
|
|
|
import java.util.List; |
|
|
|
import java.util.List; |
|
|
|
import java.util.Set; |
|
|
|
import java.util.Set; |
|
|
|
import java.util.function.Predicate; |
|
|
|
import java.util.function.Predicate; |
|
|
|
|
|
|
|
import javax.servlet.http.HttpServletRequest; |
|
|
|
|
|
|
|
import javax.servlet.http.HttpServletResponse; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
import org.springframework.http.HttpMethod; |
|
|
|
|
|
|
|
|
|
|
|
/** |
|
|
|
/** |
|
|
|
* <p> |
|
|
|
* <p> |
|
|
|
@ -305,6 +305,14 @@ public class StrictHttpFirewall implements HttpFirewall { |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
|
|
|
* <p> |
|
|
|
|
|
|
|
* Determines which hostnames should be allowed. The default is to allow any hostname. |
|
|
|
|
|
|
|
* </p> |
|
|
|
|
|
|
|
* |
|
|
|
|
|
|
|
* @param allowedHostnames the predicate for testing hostnames |
|
|
|
|
|
|
|
* @since 5.2 |
|
|
|
|
|
|
|
*/ |
|
|
|
public void setAllowedHostnames(Predicate<String> allowedHostnames) { |
|
|
|
public void setAllowedHostnames(Predicate<String> allowedHostnames) { |
|
|
|
if (allowedHostnames == null) { |
|
|
|
if (allowedHostnames == null) { |
|
|
|
throw new IllegalArgumentException("allowedHostnames cannot be null"); |
|
|
|
throw new IllegalArgumentException("allowedHostnames cannot be null"); |
|
|
|
|