天网安防>> tomcat-security-valves>> 返回
项目作者： bluelotussoftware

项目描述 ：
This provides Valve implementations to add response security headers to container managed security on Apache Tomcat
高级语言： Java
项目地址: git://github.com/bluelotussoftware/tomcat-security-valves.git
创建时间： 2017-08-06T16:18:41Z
项目社区：https://github.com/bluelotussoftware/tomcat-security-valves
开源协议：Apache License 2.0
下载


tomcat-security-valves Javadocs

This provides Valve implementations to add response security headers to container managed security on Apache Tomcat. The valves may be implemented by adding them to the conf/context.xml file for all deployements on Apache Tomcat, or to the project context.xml as shown below:

  1.     <!-- These can be replaced with the org.apache.catalina.filters.HttpHeaderSecurityFilter. -->
  2.     <!-- However it does not secure container-managed-security. You must use a Valve to handle that case. -->
  4.     <Valve className="com.bluelotussoftware.tomcat.security.valves.ReferrerPolicyValve" ></Valve>
  5.     <Valve className="com.bluelotussoftware.tomcat.security.valves.StrictTransportSecurityValve" ></Valve>
  6.     <Valve className="com.bluelotussoftware.tomcat.security.valves.XContentTypeOptionsValve" ></Valve>
  7.     <Valve className="com.bluelotussoftware.tomcat.security.valves.XFrameOptionsValve" ></Valve>
  8.     <Valve className="com.bluelotussoftware.tomcat.security.valves.XSSProtectionValve" ></Valve>
  9.     <Valve className="com.bluelotussoftware.tomcat.security.valves.JSecurityCheckNoCacheValve" ></Valve>

The binaries are deployed to Maven Central at the following coordinates:

  1. <dependency>
  2.   <groupId>com.bluelotussoftware</groupId>
  3.   <artifactId>tomcat-security-valves</artifactId>
  4.   <version>2.2.5</version>
  5. </dependency>

NOTE: The file should be installed in the Apache Tomcat /lib/ directory to be available for all applications. This applies even if you are using an individual context.xml per project to enable it.

Javadocs