Package org.apache.wiki.http.filter

package org.apache.wiki.http.filter

Classes

Class	Description
ClickJackFilter	X-Frame-Options: Prevents clickjacking attacks by controlling whether a page can be rendered within an <frame>, <iframe>, <embed>, or <object>.
COEPFilter	Cross-Origin-Embedder-Policy (COEP): Prevents a document from loading any cross-origin resources that do not explicitly grant permission.
ContentTypeOptionsFilter	X-Content-Type-Options: Prevents MIME type sniffing, which can lead to XSS attacks if browsers misinterpret content types.
CORPFilter	Cross-Origin-Resource-Policy
CrossDomainFilter	X-Permitted-Cross-Domain-Policies: Restricts cross-domain data loading by specific plugins, such as Flash.
CSPFilter	Content-Security-Policy (CSP): Mitigates XSS and other injection attacks by defining approved sources of content that the browser can load.
CsrfProtectionFilter	CSRF protection Filter which uses the synchronizer token pattern – an anti-CSRF token is created and stored in the user session and in a hidden field on subsequent form submits.
ReferrerPolicyFilter	Referrer-Policy: Controls the amount of referrer information sent with requests, enhancing privacy and security.
STSFilter	Strict-Transport-Security (HSTS): Enforces HTTPS-only communication, preventing downgrade attacks and cookie hijacking.