All Classes and Interfaces
Classes
Class
Description
X-Frame-Options: Prevents clickjacking attacks by controlling whether a page can be
rendered within an
<frame>, <iframe>, <embed>, or <object>.Cross-Origin-Embedder-Policy (COEP): Prevents a document from loading any
cross-origin resources that do not explicitly grant permission.
X-Content-Type-Options: Prevents MIME type sniffing, which can lead to XSS
attacks if browsers misinterpret content types.
Cross-Origin-Resource-Policy
X-Permitted-Cross-Domain-Policies: Restricts cross-domain data loading by specific plugins, such as Flash.
Content-Security-Policy (CSP): Mitigates XSS and other injection attacks by
defining approved sources of content that the browser can load.
CSRF protection Filter which uses the synchronizer token pattern – an anti-CSRF token is created and stored in the
user session and in a hidden field on subsequent form submits.
Referrer-Policy: Controls the amount of referrer information sent with
requests, enhancing privacy and security.
Strict-Transport-Security (HSTS): Enforces HTTPS-only communication,
preventing downgrade attacks and cookie hijacking.