Protected Object Policy (POP)

You can use a POP to enable the predefined XSLT resource for appropriate parts of the object space. This mechanism lets you specify the resources that need to undergo HTTP transformations.

The POP must have an extended attribute with the name HTTPTransformation and a value in the form:

• Request=resource, or
• Response=resource

where:

resource

Identifies one of the HTTP transformation resource names defined in the WebSEAL configuration file.

Only one HTTP transformation is performed on each request and response. If multiple HTTPTransformation attributes exist with Request or Response values, the first is chosen.

The following listing shows an example POP:

pdadmin sec_master> pop show http-transformation-pop attribute HTTPTransformation 
HTTPTransformation
        Request=resource_a
        Response=resource_b