Fix security risk 'Improper Input Validation'
[sdc.git] / openecomp-be / api / openecomp-sdc-rest-webapp / notifications-fe / src / main / webapp / WEB-INF / web.xml
1 <web-app
2     xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <!-- Spring -->
8     <context-param>
9         <param-name>contextConfigLocation</param-name>
10         <param-value>WEB-INF/beans-services.xml</param-value>
11     </context-param>
12
13     <listener>
14         <listener-class>org.openecomp.server.listeners.OnboardingAppStartupListener</listener-class>
15     </listener>
16
17     <filter>
18         <filter-name>dataValidatorFilter</filter-name>
19         <filter-class>org.openecomp.sdc.common.filters.DataValidatorFilter</filter-class>
20     </filter>
21     <filter-mapping>
22         <filter-name>dataValidatorFilter</filter-name>
23         <url-pattern>/v1.0/*</url-pattern>
24     </filter-mapping>
25
26     <filter>
27         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
28         <filter-class>org.openecomp.sdc.common.filters.ContentSecurityPolicyHeaderFilter</filter-class>
29         <async-supported>true</async-supported>
30     </filter>
31     <filter-mapping>
32         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
33         <url-pattern>/*</url-pattern>
34     </filter-mapping>
35
36     <filter>
37         <filter-name>cross-origin</filter-name>
38         <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
39         <init-param>
40             <param-name>allowedOrigins</param-name>
41             <param-value>*</param-value>
42         </init-param>
43         <init-param>
44             <param-name>allowedMethods</param-name>
45             <param-value>*</param-value>
46         </init-param>
47         <init-param>
48             <param-name>allowedHeaders</param-name>
49             <param-value>*</param-value>
50         </init-param>
51     </filter>
52     <filter-mapping>
53         <filter-name>cross-origin</filter-name>
54         <url-pattern>/*</url-pattern>
55     </filter-mapping>
56
57     <filter>
58         <filter-name>RestrictionAccessFilter</filter-name>
59         <filter-class>org.openecomp.server.filters.RestrictionAccessFilter</filter-class>
60         <async-supported>true</async-supported>
61     </filter>
62     <filter-mapping>
63         <filter-name>RestrictionAccessFilter</filter-name>
64         <url-pattern>/*</url-pattern>
65     </filter-mapping>
66
67     <!-- Spring WS Mapping -->
68     <servlet>
69         <servlet-name>spring-mapper</servlet-name>
70         <servlet-class>
71             org.springframework.web.servlet.DispatcherServlet
72         </servlet-class>
73         <load-on-startup>1</load-on-startup>
74     </servlet>
75     <servlet-mapping>
76         <servlet-name>spring-mapper</servlet-name>
77         <url-pattern>/ws/*</url-pattern>
78     </servlet-mapping>
79     <!-- CXF -->
80     <servlet>
81         <servlet-name>CXFServlet</servlet-name>
82         <servlet-class>
83             org.apache.cxf.transport.servlet.CXFServlet
84         </servlet-class>
85         <init-param>
86             <param-name>redirects-list</param-name>
87             <param-value>
88                 /docs/(\S)+\.json
89             </param-value>
90         </init-param>
91         <init-param>
92             <param-name>redirect-attributes</param-name>
93             <param-value>
94                 javax.servlet.include.request_uri
95             </param-value>
96         </init-param>
97         <init-param>
98             <param-name>redirect-servlet-name</param-name>
99             <param-value>default</param-value>
100         </init-param>
101         <load-on-startup>1</load-on-startup>
102     </servlet>
103     <servlet-mapping>
104         <servlet-name>CXFServlet</servlet-name>
105         <url-pattern>/*</url-pattern>
106     </servlet-mapping>
107
108     <context-param>
109         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
110         <param-value>false</param-value>
111     </context-param>
112
113 </web-app>