Constructor Detail

• SecurityHeaderBuilder

  public SecurityHeaderBuilder()

Method Detail

• addSecurityHeaders

  public static void addSecurityHeaders(Map<String,List<String>> headers,
                                        String mimeType)

  Adds all appropriate security headers to a response. This method adds security headers based on the MIME type of the response. Headers are only added if they are not already present in the response. The following headers may be added:

  • Referrer-Policy: same-origin (for HTML/XML/JSON content)
  • Allow: GET, POST, HEAD (for HTML/XML/JSON content)
  • Cache-Control (appropriate policy based on MIME type)
  • X-XSS-Protection: 1; mode=block
  • X-Content-Type-Options: nosniff

  Parameters:

  headers - the HTTP response headers map to modify

  mimeType - the MIME type of the response content; may be null

• filterCacheControlHeaders

  public static void filterCacheControlHeaders(Map<String,List<String>> headers)

  Filters Cache-Control headers to remove problematic values.

  This method removes "none" and "post-check" values from Cache-Control headers, as these can cause issues with I2P HTTP proxying.

  Parameters:

  headers - the HTTP response headers map

• filterSetCookieHeaders

  public static void filterSetCookieHeaders(Map<String,List<String>> headers)

  Filters Set-Cookie headers to remove unwanted cookies.

  This method removes Set-Cookie headers containing specific strings (STYXKEY, visited=yes) that are known to be irrelevant or unwanted for I2P HTTP proxying.

  Parameters:

  headers - the HTTP response headers map