# All Classes and Interfaces

Classes
Class
Description
ClickJackFilter
X-Frame-Options: Prevents clickjacking attacks by controlling whether a page can be rendered within an `<frame>`, `<iframe>`, `<embed>`, or `<object>`.
COEPFilter
Cross-Origin-Embedder-Policy (COEP): Prevents a document from loading any cross-origin resources that do not explicitly grant permission.
ContentTypeOptionsFilter
X-Content-Type-Options: Prevents MIME type sniffing, which can lead to XSS attacks if browsers misinterpret content types.
CORPFilter
Cross-Origin-Resource-Policy
CrossDomainFilter
X-Permitted-Cross-Domain-Policies: Restricts cross-domain data loading by specific plugins, such as Flash.
CSPFilter
Content-Security-Policy (CSP): Mitigates XSS and other injection attacks by defining approved sources of content that the browser can load.
CsrfProtectionFilter
CSRF protection Filter which uses the synchronizer token pattern – an anti-CSRF token is created and stored in the user session and in a hidden field on subsequent form submits.
ReferrerPolicyFilter
Referrer-Policy: Controls the amount of referrer information sent with requests, enhancing privacy and security.
STSFilter
Strict-Transport-Security (HSTS): Enforces HTTPS-only communication, preventing downgrade attacks and cookie hijacking.