Package com.atlassian.jira.web.filters.steps.security

Interface Summary

Interface	Description
PathExclusion

Class Summary

Class	Description
HttpSecurityConfig	Configuration for applying HTTP Security Headers, here: X_FRAME_OPTIONS and CONTENT_SECURITY_POLICY which may prevent clickjacking attacks but also blocks resources to be embedded in iframes (etc).
HttpSecurityStep	Sets the following security headers on each HTTP response: REFERRER-POLICY with X_XSS_PROTECTION with X_CONTENT_TYPE_OPTIONS with X_FRAME_OPTIONS with CONTENT_SECURITY_POLICY with While the last two (X_FRAME_OPTIONS, CONTENT_SECURITY_POLICY) are about preventing clickjacking attacks, but also blocks resources to be embedded in iframes (etc).
PathExclusionModuleDescriptor