# Package org.apache.struts2.interceptor.csp

- Interface Summary
  Interface | Description
  --- | ---
  CspNonceReader | Reads the nonce value using the ValueStack, `StrutsCspNonceReader` is the default implementation
  CspSettings | CspSettings interface used by the `CspInterceptor` to add the CSP header to the response.

- Class Summary
  Class | Description
  --- | ---
  CspInterceptor | Interceptor that implements Content Security Policy on incoming requests used to protect against common XSS and data injection attacks.
  CspNonceReader.NonceValue |
  DefaultCspSettings | Default implementation of `CspSettings`.
  StrutsCspNonceReader | Reads nonce value from session or request attribute.

- Enum Summary
  Enum | Description
  --- | ---
  CspNonceSource | Source of the nonce value

Copyright © 2000–2026 Apache Software Foundation. All rights reserved.