Package org.finos.fluxnova.bpm

Class HttpHeaderSecurityIT

java.lang.Object

org.finos.fluxnova.bpm.AbstractWebIntegrationTest

org.finos.fluxnova.bpm.HttpHeaderSecurityIT

public class HttpHeaderSecurityIT
extends AbstractWebIntegrationTest

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CSP_VALUE

Fields inherited from class org.finos.fluxnova.bpm.AbstractWebIntegrationTest

appBasePath, appUrl, COOKIE_HEADER, csrfToken, HOST_NAME, httpPort, JSESSIONID_IDENTIFIER, service, sessionId, TASKLIST_PATH, testProperties, X_XSRF_TOKEN_HEADER, XSRF_TOKEN_IDENTIFIER

Constructor Summary

Constructors

Constructor	Description
HttpHeaderSecurityIT()

Method Summary

Modifier and Type	Method	Description
protected void	assertHeaderPresent(String expectedName, String expectedValue, kong.unirest.HttpResponse<String> response)
void	createClient()
void	shouldCheckAbsenceOfHsts()
void	shouldCheckPresenceOfContentSecurityPolicyHeader()
void	shouldCheckPresenceOfContentTypeOptions()
void	shouldCheckPresenceOfXssProtectionHeader()

Methods inherited from class org.finos.fluxnova.bpm.AbstractWebIntegrationTest

before, createClient, createCookieHeader, createCookieHeader, getCookie, getCookieHeaders, getCookieValue, getCookieValue, getRestCtxPath, getTokens, getWebappCtxPath, getXsrfCookieValue, getXsrfTokenHeader, preventRaceConditions, setUpClass

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CSP_VALUE

public static final String CSP_VALUE

See Also:

• Constant Field Values

Constructor Details

HttpHeaderSecurityIT

public HttpHeaderSecurityIT()

Method Details

createClient

@BeforeEach
public void createClient()
                  throws Exception

Throws:

Exception

shouldCheckPresenceOfXssProtectionHeader

@Test
@Timeout(value=10000L,
         unit=MILLISECONDS)
public void shouldCheckPresenceOfXssProtectionHeader()

shouldCheckPresenceOfContentSecurityPolicyHeader

@Test
@Timeout(value=10000L,
         unit=MILLISECONDS)
public void shouldCheckPresenceOfContentSecurityPolicyHeader()

shouldCheckPresenceOfContentTypeOptions

@Test
@Timeout(value=10000L,
         unit=MILLISECONDS)
public void shouldCheckPresenceOfContentTypeOptions()

shouldCheckAbsenceOfHsts

@Test
@Timeout(value=10000L,
         unit=MILLISECONDS)
public void shouldCheckAbsenceOfHsts()

assertHeaderPresent

protected void assertHeaderPresent(String expectedName,
 String expectedValue,
 kong.unirest.HttpResponse<String> response)