Uses of Class
com.kingsrook.qqq.middleware.javalin.routeproviders.NextDashboardSecurityHeaders
Packages that use NextDashboardSecurityHeaders
Package
Description
-
Uses of NextDashboardSecurityHeaders in com.kingsrook.qqq.middleware.javalin
Methods in com.kingsrook.qqq.middleware.javalin that return types with arguments of type NextDashboardSecurityHeadersModifier and TypeMethodDescriptionQApplicationJavalinServer.getNextDashboardSecurityHeadersCustomizer()Getter for nextDashboardSecurityHeadersCustomizerMethod parameters in com.kingsrook.qqq.middleware.javalin with type arguments of type NextDashboardSecurityHeadersModifier and TypeMethodDescriptionvoidQApplicationJavalinServer.setNextDashboardSecurityHeadersCustomizer(Consumer<NextDashboardSecurityHeaders> nextDashboardSecurityHeadersCustomizer) Setter for nextDashboardSecurityHeadersCustomizer: adjusts the Content-Security-Policy and other security headers the Next dashboard is served with (see NextDashboardSecurityHeaders).QApplicationJavalinServer.withNextDashboardSecurityHeadersCustomizer(Consumer<NextDashboardSecurityHeaders> nextDashboardSecurityHeadersCustomizer) Fluent setter for nextDashboardSecurityHeadersCustomizer, for examplewithNextDashboardSecurityHeadersCustomizer(headers -> headers.withSources("img-src", "https://cdn.example.com")). -
Uses of NextDashboardSecurityHeaders in com.kingsrook.qqq.middleware.javalin.routeproviders
Methods in com.kingsrook.qqq.middleware.javalin.routeproviders that return NextDashboardSecurityHeadersModifier and TypeMethodDescriptionNextDashboardRouteProvider.getSecurityHeaders()The headers currently sent (after the instance additions and customizer).NextDashboardSecurityHeaders.withContentSecurityPolicyEnabled(boolean enabled) Send the Content-Security-Policy (default) or not at all.NextDashboardSecurityHeaders.withDirective(String directive, String... sources) Replace a directive's sources (for example withDirective("frame-ancestors", "'self'") to allow same-origin framing).NextDashboardSecurityHeaders.withHeader(String name, String value) Set a response header sent with every dashboard file, or remove it.NextDashboardSecurityHeaders.withoutDirective(String directive) Remove a directive from the policy.NextDashboardSecurityHeaders.withoutSources(String directive, String... sources) Remove sources from a directive.NextDashboardSecurityHeaders.withReportOnly(boolean reportOnly) Send the policy as Content-Security-Policy-Report-Only, for trying out a changed policy without enforcing it.NextDashboardSecurityHeaders.withSources(String directive, String... sources) Add sources to a directive, creating it when absent.Method parameters in com.kingsrook.qqq.middleware.javalin.routeproviders with type arguments of type NextDashboardSecurityHeadersModifier and TypeMethodDescriptionNextDashboardRouteProvider.withSecurityHeadersCustomizer(Consumer<NextDashboardSecurityHeaders> customizer) Adjust the security headers (for example extra CSP sources, or allowing the dashboard to be framed).