Fix bug 'X-Frame-Options not configured: Lack of clickjacking protection'
[sdc.git] / openecomp-be / api / openecomp-sdc-rest-webapp / notifications-fe / src / main / webapp / WEB-INF / web.xml
1 <web-app
2     xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <!-- Spring -->
8     <context-param>
9         <param-name>contextConfigLocation</param-name>
10         <param-value>WEB-INF/beans-services.xml</param-value>
11     </context-param>
12
13     <listener>
14         <listener-class>org.openecomp.server.listeners.OnboardingAppStartupListener</listener-class>
15     </listener>
16
17     <filter>
18         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
19         <filter-class>org.openecomp.sdc.common.filters.ContentSecurityPolicyHeaderFilter</filter-class>
20         <async-supported>true</async-supported>
21     </filter>
22     <filter-mapping>
23         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
24         <url-pattern>/*</url-pattern>
25     </filter-mapping>
26
27     <filter>
28         <filter-name>cross-origin</filter-name>
29         <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
30         <init-param>
31             <param-name>allowedOrigins</param-name>
32             <param-value>*</param-value>
33         </init-param>
34         <init-param>
35             <param-name>allowedMethods</param-name>
36             <param-value>*</param-value>
37         </init-param>
38         <init-param>
39             <param-name>allowedHeaders</param-name>
40             <param-value>*</param-value>
41         </init-param>
42     </filter>
43     <filter-mapping>
44         <filter-name>cross-origin</filter-name>
45         <url-pattern>/*</url-pattern>
46     </filter-mapping>
47
48     <filter>
49         <filter-name>RestrictionAccessFilter</filter-name>
50         <filter-class>org.openecomp.server.filters.RestrictionAccessFilter</filter-class>
51         <async-supported>true</async-supported>
52     </filter>
53     <filter-mapping>
54         <filter-name>RestrictionAccessFilter</filter-name>
55         <url-pattern>/*</url-pattern>
56     </filter-mapping>
57     <!-- Spring WS Mapping -->
58     <servlet>
59         <servlet-name>spring-mapper</servlet-name>
60         <servlet-class>
61             org.springframework.web.servlet.DispatcherServlet
62         </servlet-class>
63         <load-on-startup>1</load-on-startup>
64     </servlet>
65     <!-- CXF -->
66     <servlet>
67         <servlet-name>CXFServlet</servlet-name>
68         <display-name>CXF Servlet</display-name>
69         <servlet-class>
70             org.apache.cxf.transport.servlet.CXFServlet
71         </servlet-class>
72         <init-param>
73             <param-name>redirects-list</param-name>
74             <param-value>
75                 /docs/(\S)+\.json
76             </param-value>
77         </init-param>
78         <init-param>
79             <param-name>redirect-attributes</param-name>
80             <param-value>
81                 javax.servlet.include.request_uri
82             </param-value>
83         </init-param>
84         <init-param>
85             <param-name>redirect-servlet-name</param-name>
86             <param-value>default</param-value>
87         </init-param>
88         <load-on-startup>1</load-on-startup>
89     </servlet>
90
91     <context-param>
92         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
93         <param-value>false</param-value>
94     </context-param>
95
96     <servlet-mapping>
97         <servlet-name>spring-mapper</servlet-name>
98         <url-pattern>/ws/*</url-pattern>
99     </servlet-mapping>
100     <servlet-mapping>
101         <servlet-name>CXFServlet</servlet-name>
102         <url-pattern>/*</url-pattern>
103     </servlet-mapping>
104
105 </web-app>