bug6101: use CORS filter origins also for Content-Security-Policy (CSP) frame-ancestors

This commit is contained in:
Axel Uhl
2025-03-13 16:32:25 +01:00
parent 0c6498939c
commit 93b5af3e57
15 changed files with 161 additions and 47 deletions
@@ -9,6 +9,7 @@ Export-Package: com.sap.sse.common,
com.sap.sse.common.fileupload,
com.sap.sse.common.filter,
com.sap.sse.common.filter.impl,
com.sap.sse.common.http,
com.sap.sse.common.impl,
com.sap.sse.common.mail,
com.sap.sse.common.media,
@@ -0,0 +1,9 @@
package com.sap.sse.common.http;
import com.sap.sse.common.Util;
public interface HttpHeaderUtil {
static boolean isValidOriginHeaderValue(String value) {
return Util.hasLength(value) && value.matches("[^ *+<>;\"]*$");
}
}