Package jetbrains.buildServer.controllers.interceptors

Class DomainIsolationProtectionInterceptor

java.lang.Object

jetbrains.buildServer.controllers.interceptors.SkippableInterceptor

jetbrains.buildServer.controllers.interceptors.DomainIsolationProtectionInterceptor

All Implemented Interfaces:

org.springframework.web.servlet.AsyncHandlerInterceptor, org.springframework.web.servlet.HandlerInterceptor

public class DomainIsolationProtectionInterceptor
extends SkippableInterceptor

An interceptor for domain isolation protection, which prevents accessing artifacts not from artifacts URL.
Prevents accessing artifacts with main URL, when the domain isolation is active.
Rejects any requests to artifacts URL except for artifact ones (with presigned token authentication scheme).
Addresses the security issue TW-83297.

See Also:

DomainIsolationProtection

Constructor Summary

Constructors

Constructor	Description
DomainIsolationProtectionInterceptor(DomainIsolationProtection domainIsolationProtection)

Method Summary

Modifier and Type	Method	Description
boolean	preHandleInternal(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, Object handler)

Methods inherited from class jetbrains.buildServer.controllers.interceptors.SkippableInterceptor

afterCompletion, afterCompletionInternal, afterConcurrentHandlingStarted, afterConcurrentHandlingStartedInternal, isInternalInterceptorsDisabledForHandler, postHandle, postHandleInternal, preHandle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DomainIsolationProtectionInterceptor

public DomainIsolationProtectionInterceptor(@NotNull
                                            DomainIsolationProtection domainIsolationProtection)

Method Detail

preHandleInternal

public boolean preHandleInternal(javax.servlet.http.HttpServletRequest request,
                                 javax.servlet.http.HttpServletResponse response,
                                 Object handler)
                          throws Exception

Specified by:

preHandleInternal in class SkippableInterceptor

Throws:

Exception