Fix security risk 'Improper Input Validation'
[sdc.git] / catalog-be / src / main / webapp / WEB-INF / web.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <web-app xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <servlet>
8         <servlet-name>jersey</servlet-name>
9         <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
10         <init-param>
11             <param-name>jersey.config.server.provider.packages</param-name>
12             <param-value>
13                 io.swagger.v3.jaxrs2.integration.resources,
14                 org.openecomp.sdc.be.servlets
15             </param-value>
16         </init-param>
17         <init-param>
18             <param-name>jersey.config.server.provider.classnames</param-name>
19             <param-value>
20                 org.glassfish.jersey.media.multipart.MultiPartFeature,
21                 org.openecomp.sdc.be.filters.BasicAuthenticationFilter,
22                 org.openecomp.sdc.be.filters.BeServletFilter,
23                 org.openecomp.sdc.be.filters.DataValidatorFilter,
24                 org.openecomp.sdc.be.filters.ComponentsAvailabilityFilter,
25                 org.glassfish.jersey.server.filter.RolesAllowedDynamicFeature,
26                 org.openecomp.sdc.be.servlets.exception.DefaultExceptionMapper,
27                 org.openecomp.sdc.be.servlets.exception.ComponentExceptionMapper,
28                 org.openecomp.sdc.be.servlets.exception.ConstraintViolationExceptionMapper,
29                 org.openecomp.sdc.be.servlets.exception.StorageExceptionMapper,
30                 org.openecomp.sdc.be.view.MixinModelWriter,
31                 org.openecomp.sdc.config.ObjectMapperProvider
32             </param-value>
33         </init-param>
34         <init-param>
35             <param-name>exclude_url_endpoints</param-name>
36             <param-value>/api/v3/analytics,/api/v3/storeAnalytics</param-value>
37         </init-param>
38         <load-on-startup>1</load-on-startup>
39
40     </servlet>
41
42     <servlet-mapping>
43         <servlet-name>jersey</servlet-name>
44         <url-pattern>/sdc2/rest/*</url-pattern>
45     </servlet-mapping>
46
47     <servlet>
48         <servlet-name>jerseyDistribution</servlet-name>
49         <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
50         <init-param>
51             <param-name>jersey.config.server.provider.packages</param-name>
52             <param-value>
53                 io.swagger.v3.jaxrs2.integration.resources,
54                 org.openecomp.sdc.be.distribution.servlet,
55                 org.openecomp.sdc.be.externalapi.servlet
56             </param-value>
57         </init-param>
58         <init-param>
59             <param-name>jersey.config.server.provider.classnames</param-name>
60             <param-value>
61                 org.glassfish.jersey.media.multipart.MultiPartFeature,
62                 org.openecomp.sdc.be.filters.BeServletFilter,
63                 org.openecomp.sdc.be.filters.DataValidatorFilter,
64                 org.openecomp.sdc.be.filters.ComponentsAvailabilityFilter,
65                 org.openecomp.sdc.be.servlets.exception.DefaultExceptionMapper,
66                 org.openecomp.sdc.be.servlets.exception.ComponentExceptionMapper,
67                 org.openecomp.sdc.be.servlets.exception.StorageExceptionMapper,
68                 org.openecomp.sdc.be.filters.BasicAuthenticationFilter
69             </param-value>
70         </init-param>
71         <load-on-startup>1</load-on-startup>
72         <async-supported>true</async-supported>
73     </servlet>
74
75     <servlet-mapping>
76         <servlet-name>jerseyDistribution</servlet-name>
77         <url-pattern>/sdc/*</url-pattern>
78     </servlet-mapping>
79
80     <!-- ECOMP Portal -->
81     <servlet>
82         <servlet-name>ECOMPServlet</servlet-name>
83         <servlet-class>org.onap.portalsdk.core.onboarding.crossapi.PortalRestAPIProxy
84         </servlet-class>
85         <load-on-startup>3</load-on-startup>
86         <async-supported>true</async-supported>
87     </servlet>
88
89     <servlet>
90         <servlet-name>ViewStatusMessages</servlet-name>
91         <servlet-class>ch.qos.logback.classic.ViewStatusMessagesServlet</servlet-class>
92         <async-supported>true</async-supported>
93     </servlet>
94
95     <servlet>
96         <servlet-name>TogglzConsoleServlet</servlet-name>
97         <servlet-class>org.togglz.console.TogglzConsoleServlet</servlet-class>
98     </servlet>
99
100     <servlet-mapping>
101         <servlet-name>TogglzConsoleServlet</servlet-name>
102         <url-pattern>/catalog/togglz/*</url-pattern>
103     </servlet-mapping>
104
105     <servlet-mapping>
106         <servlet-name>ViewStatusMessages</servlet-name>
107         <url-pattern>/lbClassicStatus</url-pattern>
108     </servlet-mapping>
109
110     <filter>
111         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
112         <filter-class>org.openecomp.sdc.be.filters.ContentSecurityPolicyHeaderFilter</filter-class>
113         <async-supported>true</async-supported>
114     </filter>
115     <filter-mapping>
116         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
117         <url-pattern>/*</url-pattern>
118     </filter-mapping>
119
120     <filter>
121         <filter-name>gatewayFilter</filter-name>
122         <filter-class>
123             org.springframework.web.filter.DelegatingFilterProxy
124         </filter-class>
125         <init-param>
126             <param-name>targetFilterLifecycle</param-name>
127             <param-value>true</param-value>
128         </init-param>
129     </filter>
130
131     <filter-mapping>
132         <filter-name>gatewayFilter</filter-name>
133         <url-pattern>/sdc2/rest/*</url-pattern>
134         <url-pattern>/sdc/*</url-pattern>
135     </filter-mapping>
136
137     <filter>
138         <filter-name>reqValidationFilter</filter-name>
139         <filter-class>
140             org.springframework.web.filter.DelegatingFilterProxy
141         </filter-class>
142         <init-param>
143             <param-name>targetFilterLifecycle</param-name>
144             <param-value>true</param-value>
145         </init-param>
146     </filter>
147
148     <filter-mapping>
149         <filter-name>reqValidationFilter</filter-name>
150         <url-pattern>/sdc2/rest/*</url-pattern>
151         <url-pattern>/sdc/*</url-pattern>
152     </filter-mapping>
153
154     <filter>
155         <filter-name>dataValidatorFilter</filter-name>
156         <filter-class>
157             org.openecomp.sdc.be.filters.DataValidatorFilter
158         </filter-class>
159     </filter>
160     <filter-mapping>
161         <filter-name>dataValidatorFilter</filter-name>
162         <url-pattern>/sdc2/rest/*</url-pattern>
163         <url-pattern>/sdc/*</url-pattern>
164     </filter-mapping>
165
166     <error-page>
167         <exception-type>java.lang.RuntimeException</exception-type>
168         <location>/sdc2/rest/v1/catalog/handleException/</location>
169     </error-page>
170     <context-param>
171         <param-name>contextConfigLocation</param-name>
172         <param-value>classpath:application-context.xml</param-value>
173     </context-param>
174
175     <context-param>
176         <param-name>org.togglz.core.manager.TogglzConfig</param-name>
177         <param-value>org.openecomp.sdc.be.togglz.TogglzConfiguration</param-value>
178     </context-param>
179
180     <context-param>
181         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
182         <param-value>false</param-value>
183     </context-param>
184
185     <listener>
186         <listener-class>org.openecomp.sdc.be.listen.BEAppContextListener</listener-class>
187     </listener>
188
189     <listener>
190         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
191     </listener>
192
193     <welcome-file-list>
194         <welcome-file>swagger-ui/index.html</welcome-file>
195     </welcome-file-list>
196 </web-app>