- Notifications
You must be signed in to change notification settings - Fork3
This provides Valve implementations to add response security headers to container managed security on Apache Tomcat
License
bluelotussoftware/tomcat-security-valves
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
This providesValve implementations to add response security headers to container managed security on Apache Tomcat. The valves may be implemented by adding them to theconf/context.xml file for all deployements on Apache Tomcat, or to the projectcontext.xml as shown below:
<!-- These can be replaced with the org.apache.catalina.filters.HttpHeaderSecurityFilter. --> <!-- However it does not secure container-managed-security. You must use a Valve to handle that case. --> <Valve className="com.bluelotussoftware.tomcat.security.valves.ReferrerPolicyValve" /> <Valve className="com.bluelotussoftware.tomcat.security.valves.StrictTransportSecurityValve" /> <Valve className="com.bluelotussoftware.tomcat.security.valves.XContentTypeOptionsValve" /> <Valve className="com.bluelotussoftware.tomcat.security.valves.XFrameOptionsValve" /> <Valve className="com.bluelotussoftware.tomcat.security.valves.XSSProtectionValve" /> <Valve className="com.bluelotussoftware.tomcat.security.valves.JSecurityCheckNoCacheValve" />
The binaries are deployed to Maven Central at the following coordinates:
<dependency> <groupId>com.bluelotussoftware</groupId> <artifactId>tomcat-security-valves</artifactId> <version>2.2.5</version></dependency>
NOTE: The file should be installed in the Apache Tomcat/lib/ directory to be available for all applications. This applies even if you are using an individualcontext.xml per project to enable it.
About
This provides Valve implementations to add response security headers to container managed security on Apache Tomcat
Topics
Resources
License
Uh oh!
There was an error while loading.Please reload this page.
Stars
Watchers
Forks
Packages0
Uh oh!
There was an error while loading.Please reload this page.
Contributors3
Uh oh!
There was an error while loading.Please reload this page.