com.sun.jersey.api.container.filter
Class CsrfProtectionFilter

java.lang.Object
  com.sun.jersey.api.container.filter.CsrfProtectionFilter

All Implemented Interfaces:

ContainerRequestFilter

public class CsrfProtectionFilter
extends java.lang.Object
implements ContainerRequestFilter

Simple server-side request filter that implements CSRF protection as per the Guidelines for Implementation of REST by NSA (section IV.F) and section 4.3 of this paper. If you add it to the request filters of your application, it will check for X-Requested-By header in each request except for those that don't change state (GET, OPTIONS, HEAD). If the header is not found, it returns Response.Status.BAD_REQUEST response back to the client.

Author:

Martin Matula

CsrfProtectionFilter

public CsrfProtectionFilter()

filter

public ContainerRequest filter(ContainerRequest request)

Description copied from interface: ContainerRequestFilter

Filter the request.

An implementation may modify the state of the request or create a new instance.

Specified by:

filter in interface ContainerRequestFilter

Parameters:

request - the request.

Returns:

the request.