Package io.jenkins.plugins.csp

Class ContentSecurityPolicyRootAction

java.lang.Object

hudson.model.InvisibleAction

io.jenkins.plugins.csp.ContentSecurityPolicyRootAction

All Implemented Interfaces:

ExtensionPoint, Action, ModelObject, RootAction, UnprotectedRootAction

@Extension
@Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class)
@Symbol("contentSecurityPolicyRootAction")
public class ContentSecurityPolicyRootAction
extends InvisibleAction
implements UnprotectedRootAction

Reporting endpoint for CSP violations. StaplerRequest2.getRestOfPath() is used to associate violations with the view they occur in; ContentSecurityPolicyDecorator needs to have a dynamic report URL for that.

While this is an UnprotectedRootAction, only submissions with correct HMAC from Context.encodeContext(Object, Authentication, String) will be accepted.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ContentSecurityPolicyRootAction.CrumbExclusionImpl

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Field Summary

Fields

Modifier and Type	Field	Description
static final Logger	LOGGER
static final String	URL

Constructor Summary

Constructors

Constructor	Description
ContentSecurityPolicyRootAction()

Method Summary

Modifier and Type	Method	Description
org.kohsuke.stapler.HttpResponse	doDynamic(org.kohsuke.stapler.StaplerRequest2 req)
String	getUrlName()

Methods inherited from class hudson.model.InvisibleAction

getDisplayName, getIconFileName

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface hudson.model.Action

getDisplayName, getIconFileName

Field Details

URL

public static final String URL

See Also:

• Constant Field Values

LOGGER

public static final Logger LOGGER

Constructor Details

ContentSecurityPolicyRootAction

public ContentSecurityPolicyRootAction()

Method Details

getUrlName

public String getUrlName()

Specified by:

getUrlName in interface Action

Overrides:

getUrlName in class InvisibleAction

doDynamic

@POST
public org.kohsuke.stapler.HttpResponse doDynamic(org.kohsuke.stapler.StaplerRequest2 req)