From 146a0fb8b0e90f9196e569152f649baf60d6cc8f Mon Sep 17 00:00:00 2001
From: Joaquín Reñé <jrene@curisit.net>
Date: Tue, 07 Oct 2025 14:52:57 +0000
Subject: [PATCH] #4410 - Comments on classes

---
 securis/src/main/java/net/curisit/securis/DevFilter.java |   29 +++++++++++++++++++++++++++++
 1 files changed, 29 insertions(+), 0 deletions(-)

diff --git a/securis/src/main/java/net/curisit/securis/DevFilter.java b/securis/src/main/java/net/curisit/securis/DevFilter.java
index 2ed1e4d..fe7b3f1 100644
--- a/securis/src/main/java/net/curisit/securis/DevFilter.java
+++ b/securis/src/main/java/net/curisit/securis/DevFilter.java
@@ -1,3 +1,6 @@
+/*
+ * Copyright @ 2013 CurisTEC, S.A.S. All Rights Reserved.
+ */
 package net.curisit.securis;
 
 import java.io.IOException;
@@ -16,6 +19,19 @@
 import org.apache.logging.log4j.LogManager;
 import org.apache.logging.log4j.Logger;
 
+/**
+* DevFilter
+* <p>
+* Development-time CORS helper. Adds permissive CORS headers to allow front-end
+* resources (e.g. JS served from a different origin) to call the API.
+* Short-circuits <code>OPTIONS</code> preflight requests.
+*
+* <p><b>Security note:</b> This configuration is intentionally permissive and should be
+* restricted for production.
+* 
+* @author JRA
+ * Last reviewed by JRA on Oct 5, 2025.
+*/
 @ApplicationScoped
 @WebFilter(urlPatterns = "/*")
 public class DevFilter implements Filter {
@@ -23,10 +39,19 @@
 	@SuppressWarnings("unused")
 	private static final Logger log = LogManager.getLogger(DevFilter.class);
 
+	/** 
+	 * init<p>
+	 * Filter init hook (unused). 
+	 */
 	@Override
 	public void init(FilterConfig fc) throws ServletException {
 	}
 
+	/**
+	* doFilter
+	* <p>
+	* Add CORS headers and pass through non-OPTIONS methods to the next filter.
+	*/
 	@Override
 	public void doFilter(ServletRequest sreq, ServletResponse sres, FilterChain fc) throws IOException, ServletException {
 		HttpServletRequest req = (HttpServletRequest) sreq;
@@ -44,6 +69,10 @@
 		}
 	}
 
+	/** 
+	 * destroy<p>
+	 * Filter destroy hook (unused). 
+	 */
 	@Override
 	public void destroy() {
 	}

--
Gitblit v1.3.2