com.atlassian.bamboo.seraph.config

Class BambooRedirectPolicy

java.lang.Object

com.atlassian.seraph.config.DefaultRedirectPolicy

com.atlassian.bamboo.seraph.config.BambooRedirectPolicy

All Implemented Interfaces:

com.atlassian.seraph.config.RedirectPolicy, com.atlassian.seraph.Initable

public class BambooRedirectPolicy
extends com.atlassian.seraph.config.DefaultRedirectPolicy

Purpose of this policy is to fix open redirect issue not detected by original DefaultRedirectPolicy We can revert to DefaultRedirectPolicy once https://jira.atlassian.com/browse/SER-220 has been solved

Constructor Summary

Constructors

Constructor and Description
BambooRedirectPolicy()

Method Summary

Modifier and Type	Method and Description
boolean	allowedRedirectDestination(String redirectUrl, javax.servlet.http.HttpServletRequest request)

Methods inherited from class com.atlassian.seraph.config.DefaultRedirectPolicy

init, isAllowAnyUrl

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BambooRedirectPolicy

public BambooRedirectPolicy()

Method Detail

allowedRedirectDestination

public boolean allowedRedirectDestination(String redirectUrl,
                                          javax.servlet.http.HttpServletRequest request)

Specified by:

allowedRedirectDestination in interface com.atlassian.seraph.config.RedirectPolicy

Overrides:

allowedRedirectDestination in class com.atlassian.seraph.config.DefaultRedirectPolicy