Fix bug 'X-Frame-Options not configured: Lack of clickjacking protection'
[sdc.git] / catalog-be / src / main / webapp / WEB-INF / web.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <web-app xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <servlet>
8         <servlet-name>jersey</servlet-name>
9         <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
10         <init-param>
11             <param-name>jersey.config.server.provider.packages</param-name>
12             <param-value>
13                 io.swagger.v3.jaxrs2.integration.resources,
14                 org.openecomp.sdc.be.servlets
15             </param-value>
16         </init-param>
17         <init-param>
18             <param-name>jersey.config.server.provider.classnames</param-name>
19             <param-value>
20                 org.glassfish.jersey.media.multipart.MultiPartFeature,
21                 org.openecomp.sdc.be.filters.BasicAuthenticationFilter,
22                 org.openecomp.sdc.be.filters.BeServletFilter,
23                 org.openecomp.sdc.be.filters.ComponentsAvailabilityFilter,
24                 org.glassfish.jersey.server.filter.RolesAllowedDynamicFeature,
25                 org.openecomp.sdc.be.servlets.exception.DefaultExceptionMapper,
26                 org.openecomp.sdc.be.servlets.exception.ComponentExceptionMapper,
27                 org.openecomp.sdc.be.servlets.exception.ConstraintViolationExceptionMapper,
28                 org.openecomp.sdc.be.servlets.exception.StorageExceptionMapper,
29                 org.openecomp.sdc.be.view.MixinModelWriter,
30                 org.openecomp.sdc.config.ObjectMapperProvider
31             </param-value>
32         </init-param>
33         <init-param>
34             <param-name>exclude_url_endpoints</param-name>
35             <param-value>/api/v3/analytics,/api/v3/storeAnalytics</param-value>
36         </init-param>
37         <load-on-startup>1</load-on-startup>
38
39     </servlet>
40
41     <servlet-mapping>
42         <servlet-name>jersey</servlet-name>
43         <url-pattern>/sdc2/rest/*</url-pattern>
44     </servlet-mapping>
45
46     <servlet>
47         <servlet-name>jerseyDistribution</servlet-name>
48         <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
49         <init-param>
50             <param-name>jersey.config.server.provider.packages</param-name>
51             <param-value>
52                 io.swagger.v3.jaxrs2.integration.resources,
53                 org.openecomp.sdc.be.distribution.servlet,
54                 org.openecomp.sdc.be.externalapi.servlet
55             </param-value>
56         </init-param>
57         <init-param>
58             <param-name>jersey.config.server.provider.classnames</param-name>
59             <param-value>
60                 org.glassfish.jersey.media.multipart.MultiPartFeature,
61                 org.openecomp.sdc.be.filters.BeServletFilter,
62                 org.openecomp.sdc.be.filters.ComponentsAvailabilityFilter,
63                 org.openecomp.sdc.be.servlets.exception.DefaultExceptionMapper,
64                 org.openecomp.sdc.be.servlets.exception.ComponentExceptionMapper,
65                 org.openecomp.sdc.be.servlets.exception.StorageExceptionMapper,
66                 org.openecomp.sdc.be.filters.BasicAuthenticationFilter
67             </param-value>
68         </init-param>
69         <load-on-startup>1</load-on-startup>
70         <async-supported>true</async-supported>
71     </servlet>
72
73     <servlet-mapping>
74         <servlet-name>jerseyDistribution</servlet-name>
75         <url-pattern>/sdc/*</url-pattern>
76     </servlet-mapping>
77
78     <!-- ECOMP Portal -->
79     <servlet>
80         <servlet-name>ECOMPServlet</servlet-name>
81         <servlet-class>org.onap.portalsdk.core.onboarding.crossapi.PortalRestAPIProxy
82         </servlet-class>
83         <load-on-startup>3</load-on-startup>
84         <async-supported>true</async-supported>
85     </servlet>
86
87     <servlet>
88         <servlet-name>ViewStatusMessages</servlet-name>
89         <servlet-class>ch.qos.logback.classic.ViewStatusMessagesServlet</servlet-class>
90         <async-supported>true</async-supported>
91     </servlet>
92
93     <servlet>
94         <servlet-name>TogglzConsoleServlet</servlet-name>
95         <servlet-class>org.togglz.console.TogglzConsoleServlet</servlet-class>
96     </servlet>
97
98     <servlet-mapping>
99         <servlet-name>TogglzConsoleServlet</servlet-name>
100         <url-pattern>/catalog/togglz/*</url-pattern>
101     </servlet-mapping>
102
103     <servlet-mapping>
104         <servlet-name>ViewStatusMessages</servlet-name>
105         <url-pattern>/lbClassicStatus</url-pattern>
106     </servlet-mapping>
107
108     <filter>
109         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
110         <filter-class>org.openecomp.sdc.be.filters.ContentSecurityPolicyHeaderFilter</filter-class>
111         <async-supported>true</async-supported>
112     </filter>
113     <filter-mapping>
114         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
115         <url-pattern>/*</url-pattern>
116     </filter-mapping>
117
118     <filter>
119         <filter-name>gatewayFilter</filter-name>
120         <filter-class>
121             org.springframework.web.filter.DelegatingFilterProxy
122         </filter-class>
123         <init-param>
124             <param-name>targetFilterLifecycle</param-name>
125             <param-value>true</param-value>
126         </init-param>
127     </filter>
128
129     <filter-mapping>
130         <filter-name>gatewayFilter</filter-name>
131         <url-pattern>/sdc2/rest/*</url-pattern>
132         <url-pattern>/sdc/*</url-pattern>
133     </filter-mapping>
134
135     <filter>
136         <filter-name>reqValidationFilter</filter-name>
137         <filter-class>
138             org.springframework.web.filter.DelegatingFilterProxy
139         </filter-class>
140         <init-param>
141             <param-name>targetFilterLifecycle</param-name>
142             <param-value>true</param-value>
143         </init-param>
144     </filter>
145
146     <filter-mapping>
147         <filter-name>reqValidationFilter</filter-name>
148         <url-pattern>/sdc2/rest/*</url-pattern>
149         <url-pattern>/sdc/*</url-pattern>
150     </filter-mapping>
151
152     <error-page>
153         <exception-type>java.lang.RuntimeException</exception-type>
154         <location>/sdc2/rest/v1/catalog/handleException/</location>
155     </error-page>
156     <context-param>
157         <param-name>contextConfigLocation</param-name>
158         <param-value>classpath:application-context.xml</param-value>
159     </context-param>
160
161     <context-param>
162         <param-name>org.togglz.core.manager.TogglzConfig</param-name>
163         <param-value>org.openecomp.sdc.be.togglz.TogglzConfiguration</param-value>
164     </context-param>
165
166     <context-param>
167         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
168         <param-value>false</param-value>
169     </context-param>
170
171     <listener>
172         <listener-class>org.openecomp.sdc.be.listen.BEAppContextListener</listener-class>
173     </listener>
174
175     <listener>
176         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
177     </listener>
178
179     <welcome-file-list>
180         <welcome-file>swagger-ui/index.html</welcome-file>
181     </welcome-file-list>
182 </web-app>