Skip to content

Commit c4b0ebe

Browse files
committed
ContentSecurityPolicyHeaderWriter: pass uri instead of a whole request object.
No functional changes.
1 parent 983b479 commit c4b0ebe

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

src/main/java/ru/mystamps/web/support/spring/security/ContentSecurityPolicyHeaderWriter.java

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -101,12 +101,11 @@ class ContentSecurityPolicyHeaderWriter implements HeaderWriter {
101101

102102
@Override
103103
public void writeHeaders(HttpServletRequest request, HttpServletResponse response) {
104-
response.setHeader("Content-Security-Policy-Report-Only", constructDirectives(request));
104+
String uri = request.getRequestURI();
105+
response.setHeader("Content-Security-Policy-Report-Only", constructDirectives(uri));
105106
}
106107

107-
private static String constructDirectives(HttpServletRequest request) {
108-
String uri = request.getRequestURI();
109-
108+
private static String constructDirectives(String uri) {
110109
boolean onCollectionInfoPage = uri.startsWith(COLLECTION_INFO_PAGE_PATTERN);
111110

112111
StringBuilder sb = new StringBuilder(MIN_HEADER_LENGTH);

0 commit comments

Comments
 (0)