|
@@ -16,10 +16,6 @@
|
|
|
|
|
|
package org.springframework.security.web.firewall;
|
|
|
|
|
|
-import org.springframework.http.HttpMethod;
|
|
|
-
|
|
|
-import javax.servlet.http.HttpServletRequest;
|
|
|
-import javax.servlet.http.HttpServletResponse;
|
|
|
import java.util.Arrays;
|
|
|
import java.util.Collection;
|
|
|
import java.util.Collections;
|
|
@@ -27,6 +23,10 @@ import java.util.HashSet;
|
|
|
import java.util.List;
|
|
|
import java.util.Set;
|
|
|
import java.util.function.Predicate;
|
|
|
+import javax.servlet.http.HttpServletRequest;
|
|
|
+import javax.servlet.http.HttpServletResponse;
|
|
|
+
|
|
|
+import org.springframework.http.HttpMethod;
|
|
|
|
|
|
/**
|
|
|
* <p>
|
|
@@ -285,6 +285,14 @@ public class StrictHttpFirewall implements HttpFirewall {
|
|
|
}
|
|
|
}
|
|
|
|
|
|
+ /**
|
|
|
+ * <p>
|
|
|
+ * Determines which hostnames should be allowed. The default is to allow any hostname.
|
|
|
+ * </p>
|
|
|
+ *
|
|
|
+ * @param allowedHostnames the predicate for testing hostnames
|
|
|
+ * @since 5.1.11
|
|
|
+ */
|
|
|
public void setAllowedHostnames(Predicate<String> allowedHostnames) {
|
|
|
if (allowedHostnames == null) {
|
|
|
throw new IllegalArgumentException("allowedHostnames cannot be null");
|