Declaring the Interceptor
In order to enable ColdBox security you must register the Security interceptor in your parent or other module configuration's interceptors
section:
IMPORTANT If you are using SES or URL mappings in your ColdBox 4 application, make sure that you declare the security interceptor after the SES interceptor. Interceptors require order, so security needs for the URL to be translated first. In coldbox 5 SES is handled by the Routing service, so you don't need this SES interceptor.
Global Properties
Property | Type | Required | Default | Description |
| boolean | false | true | By default all secure and white lists are matched using regular expressions. You can disable it if you like and use plain old string matching. |
| boolean | false | false | Flag that tells the interceptor to validate the columns in the security rules. This makes sure all columns have the same columns. By default it is in relaxed mode so all columns are used. |
| boolean | false | false | This turns on the |
| string | true | --- | Where to look for the rules as described above, this value has to be a choice from the following list |
| string | false | --- | The class path of the validator object to use. The interceptor will create the object for you and cache it internally. If the object has an |
| string | false | --- | The model name of the security validator to use for custom validations. The interceptor will call |
| string | false | --- | The bean name of the security validator to use for custom validations. The interceptor will ask the IoC module for the bean according to this property |
Last updated