Fix bug 'X-Frame-Options not configured: Lack of clickjacking protection'
[sdc.git] / catalog-fe / src / main / webapp / WEB-INF / web.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <web-app xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <servlet>
8         <servlet-name>jersey</servlet-name>
9         <servlet-class>org.glassfish.jersey.servlet.ServletContainer</servlet-class>
10         <init-param>
11             <param-name>jersey.config.server.provider.packages</param-name>
12             <param-value>org.openecomp.sdc.fe.servlets</param-value>
13         </init-param>
14
15         <init-param>
16             <param-name>jersey.config.server.provider.classnames</param-name>
17             <param-value>org.glassfish.jersey.media.multipart.MultiPartFeature</param-value>
18         </init-param>
19         <init-param>
20             <param-name>com.sun.jersey.api.json.POJOMappingFeature</param-name>
21             <param-value>true</param-value>
22         </init-param>
23         <load-on-startup>1</load-on-startup>
24         <async-supported>true</async-supported>
25     </servlet>
26
27     <servlet-mapping>
28         <servlet-name>jersey</servlet-name>
29         <url-pattern>/rest/*</url-pattern>
30     </servlet-mapping>
31
32     <servlet>
33         <servlet-name>ViewStatusMessages</servlet-name>
34         <servlet-class>ch.qos.logback.classic.ViewStatusMessagesServlet</servlet-class>
35         <async-supported>true</async-supported>
36     </servlet>
37
38     <servlet-mapping>
39         <servlet-name>ViewStatusMessages</servlet-name>
40         <url-pattern>/lbClassicStatus</url-pattern>
41     </servlet-mapping>
42
43     <!-- Fe Proxy Servlet -->
44     <servlet>
45         <servlet-name>FeProxy</servlet-name>
46         <servlet-class>org.openecomp.sdc.fe.servlets.FeProxyServlet</servlet-class>
47
48         <load-on-startup>1</load-on-startup>
49         <async-supported>true</async-supported>
50     </servlet>
51
52     <servlet-mapping>
53         <servlet-name>FeProxy</servlet-name>
54         <url-pattern>/feProxy/*</url-pattern>
55     </servlet-mapping>
56
57     <servlet>
58         <servlet-name>Portal</servlet-name>
59         <servlet-class>org.openecomp.sdc.fe.servlets.PortalServlet</servlet-class>
60         <async-supported>true</async-supported>
61     </servlet>
62
63     <servlet-mapping>
64         <servlet-name>Portal</servlet-name>
65         <url-pattern>/portal</url-pattern>
66     </servlet-mapping>
67
68     <context-param>
69         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
70         <param-value>false</param-value>
71     </context-param>
72
73     <filter>
74         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
75         <filter-class>org.openecomp.sdc.fe.filters.ContentSecurityPolicyHeaderFilter</filter-class>
76         <async-supported>true</async-supported>
77     </filter>
78     <filter-mapping>
79         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
80         <url-pattern>/*</url-pattern>
81     </filter-mapping>
82
83     <filter>
84         <filter-name>AuditLogServletFilter</filter-name>
85         <filter-class>org.onap.logging.filter.base.AuditLogServletFilter</filter-class>
86         <async-supported>true</async-supported>
87     </filter>
88
89     <filter>
90         <filter-name>gzipFilter</filter-name>
91         <filter-class>org.openecomp.sdc.fe.filters.GzipFilter</filter-class>
92         <async-supported>true</async-supported>
93     </filter>
94
95     <filter-mapping>
96         <filter-name>AuditLogServletFilter</filter-name>
97         <url-pattern>/*</url-pattern>
98     </filter-mapping>
99
100     <filter-mapping>
101         <filter-name>gzipFilter</filter-name>
102         <url-pattern>*.jsgz</url-pattern>
103     </filter-mapping>
104
105     <listener>
106         <listener-class>org.openecomp.sdc.fe.listen.FEAppContextListener</listener-class>
107     </listener>
108
109     <welcome-file-list>
110         <welcome-file>index.html</welcome-file>
111     </welcome-file-list>
112 </web-app>