private List <string> GetAllowIframeOnDomains(IRouteBinding controller, SecurityHeaderLogic securityHeaderLogic)
            {
                List <string> domains = null;

                if (controller != null)
                {
                    var controllerDomains = controller?.RouteBinding?.AllowIframeOnDomains;
                    if (controllerDomains != null)
                    {
                        domains = controllerDomains;
                    }
                }

                var logicDomains = securityHeaderLogic.GetAllowIframeOnDomains();

                if (logicDomains != null)
                {
                    if (domains == null)
                    {
                        domains = logicDomains;
                    }
                    else
                    {
                        domains.ConcatOnce(logicDomains);
                    }
                }

                return(domains);
            }
Exemplo n.º 2
0
 public ActionController(TelemetryScopedLogger logger, IStringLocalizer localizer, ITenantRepository tenantRepository, SecurityHeaderLogic securityHeaderLogic, AccountLogic userAccountLogic, AccountActionLogic accountActionLogic) : base(logger)
 {
     this.logger              = logger;
     this.localizer           = localizer;
     this.tenantRepository    = tenantRepository;
     this.securityHeaderLogic = securityHeaderLogic;
     this.userAccountLogic    = userAccountLogic;
     this.accountActionLogic  = accountActionLogic;
 }
Exemplo n.º 3
0
 public ErrorController(TelemetryScopedLogger logger, IWebHostEnvironment environment, IStringLocalizer localizer, SequenceLogic sequenceLogic, ITenantRepository tenantRepository, SecurityHeaderLogic securityHeaderLogic) : base(logger, false)
 {
     this.logger              = logger;
     this.environment         = environment;
     this.localizer           = localizer;
     this.sequenceLogic       = sequenceLogic;
     this.tenantRepository    = tenantRepository;
     this.securityHeaderLogic = securityHeaderLogic;
 }
Exemplo n.º 4
0
 public LoginController(TelemetryScopedLogger logger, IStringLocalizer localizer, ITenantRepository tenantRepository, LoginPageLogic loginPageLogic, SessionLoginUpPartyLogic sessionLogic, SequenceLogic sequenceLogic, SecurityHeaderLogic securityHeaderLogic, AccountLogic userAccountLogic, AccountActionLogic accountActionLogic, ClaimTransformLogic claimTransformLogic, LoginUpLogic loginUpLogic, LogoutUpLogic logoutUpLogic, SingleLogoutDownLogic singleLogoutDownLogic, OAuthRefreshTokenGrantDownLogic <OAuthDownClient, OAuthDownScope, OAuthDownClaim> oauthRefreshTokenGrantLogic) : base(logger)
 {
     this.logger                      = logger;
     this.localizer                   = localizer;
     this.tenantRepository            = tenantRepository;
     this.loginPageLogic              = loginPageLogic;
     this.sessionLogic                = sessionLogic;
     this.sequenceLogic               = sequenceLogic;
     this.securityHeaderLogic         = securityHeaderLogic;
     this.userAccountLogic            = userAccountLogic;
     this.accountActionLogic          = accountActionLogic;
     this.claimTransformLogic         = claimTransformLogic;
     this.loginUpLogic                = loginUpLogic;
     this.logoutUpLogic               = logoutUpLogic;
     this.singleLogoutDownLogic       = singleLogoutDownLogic;
     this.oauthRefreshTokenGrantLogic = oauthRefreshTokenGrantLogic;
 }