Fix security risk 'Improper Input Validation'
[sdc.git] / openecomp-be / api / openecomp-sdc-rest-webapp / onboarding-rest-war / src / main / webapp / WEB-INF / web.xml
1 <web-app
2     xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7     <!-- Spring -->
8     <context-param>
9         <param-name>contextConfigLocation</param-name>
10         <param-value>WEB-INF/beans-services.xml</param-value>
11     </context-param>
12
13     <context-param>
14         <param-name>org.togglz.core.manager.TogglzConfig</param-name>
15         <param-value>org.openecomp.sdc.be.togglz.TogglzConfiguration</param-value>
16     </context-param>
17
18     <context-param>
19         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
20         <param-value>false</param-value>
21     </context-param>
22
23     <listener>
24         <listener-class>org.openecomp.server.listeners.OnboardingAppStartupListener</listener-class>
25     </listener>
26
27     <filter>
28         <filter-name>dataValidatorFilter</filter-name>
29         <filter-class>org.openecomp.sdc.common.filters.DataValidatorFilter</filter-class>
30     </filter>
31     <filter-mapping>
32         <filter-name>dataValidatorFilter</filter-name>
33         <url-pattern>/v1.0/*</url-pattern>
34     </filter-mapping>
35
36     <filter>
37         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
38         <filter-class>org.openecomp.sdc.common.filters.ContentSecurityPolicyHeaderFilter
39         </filter-class>
40         <async-supported>true</async-supported>
41     </filter>
42     <filter-mapping>
43         <filter-name>contentSecurityPolicyHeaderFilter</filter-name>
44         <url-pattern>/*</url-pattern>
45     </filter-mapping>
46
47     <filter>
48         <filter-name>PermissionsFilter</filter-name>
49         <filter-class>org.openecomp.sdc.itempermissions.servlet.PermissionsFilter</filter-class>
50     </filter>
51     <filter-mapping>
52         <filter-name>PermissionsFilter</filter-name>
53         <url-pattern>/v1.0/vendor-license-models/*</url-pattern>
54         <url-pattern>/v1.0/vendor-software-products/*</url-pattern>
55     </filter-mapping>
56
57     <filter>
58         <filter-name>cross-origin</filter-name>
59         <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
60         <init-param>
61             <param-name>allowedOrigins</param-name>
62             <param-value>*</param-value>
63         </init-param>
64         <init-param>
65             <param-name>allowedMethods</param-name>
66             <param-value>*</param-value>
67         </init-param>
68         <init-param>
69             <param-name>allowedHeaders</param-name>
70             <param-value>*</param-value>
71         </init-param>
72     </filter>
73     <filter-mapping>
74         <filter-name>cross-origin</filter-name>
75         <url-pattern>/*</url-pattern>
76     </filter-mapping>
77
78     <filter>
79         <filter-name>RestrictionAccessFilter</filter-name>
80         <filter-class>org.openecomp.server.filters.RestrictionAccessFilter</filter-class>
81         <async-supported>true</async-supported>
82     </filter>
83     <filter-mapping>
84         <filter-name>RestrictionAccessFilter</filter-name>
85         <url-pattern>/*</url-pattern>
86     </filter-mapping>
87
88     <filter>
89         <filter-name>BasicAuth</filter-name>
90         <filter-class>org.openecomp.server.filters.BasicAuthenticationFilter</filter-class>
91     </filter>
92     <filter-mapping>
93         <filter-name>BasicAuth</filter-name>
94         <url-pattern>/1.0/*</url-pattern>
95     </filter-mapping>
96
97     <filter>
98         <filter-name>AuthN</filter-name>
99         <filter-class>org.openecomp.server.filters.ActionAuthenticationFilter</filter-class>
100     </filter>
101     <filter-mapping>
102         <filter-name>AuthN</filter-name>
103         <url-pattern>/workflow/v1.0/actions/*</url-pattern>
104     </filter-mapping>
105
106     <filter>
107         <filter-name>AuthZ</filter-name>
108         <filter-class>org.openecomp.server.filters.ActionAuthorizationFilter</filter-class>
109     </filter>
110     <filter-mapping>
111         <filter-name>AuthZ</filter-name>
112         <url-pattern>/workflow/v1.0/actions/*</url-pattern>
113     </filter-mapping>
114
115     <filter>
116         <filter-name>SessionContextFilter</filter-name>
117         <filter-class>org.openecomp.server.filters.OnboardingSessionContextFilter</filter-class>
118     </filter>
119     <filter-mapping>
120         <filter-name>SessionContextFilter</filter-name>
121         <url-pattern>/*</url-pattern>
122     </filter-mapping>
123
124     <!-- Spring WS Mapping -->
125     <servlet>
126         <servlet-name>spring-mapper</servlet-name>
127         <servlet-class>
128             org.springframework.web.servlet.DispatcherServlet
129         </servlet-class>
130         <load-on-startup>1</load-on-startup>
131     </servlet>
132     <servlet-mapping>
133         <servlet-name>spring-mapper</servlet-name>
134         <url-pattern>/ws/*</url-pattern>
135     </servlet-mapping>
136     <!-- CXF -->
137     <servlet>
138         <servlet-name>CXFServlet</servlet-name>
139         <servlet-class>
140             org.apache.cxf.transport.servlet.CXFServlet
141         </servlet-class>
142         <init-param>
143             <param-name>redirects-list</param-name>
144             <param-value>
145                 /docs/(\S)+\.json
146             </param-value>
147         </init-param>
148         <init-param>
149             <param-name>redirect-attributes</param-name>
150             <param-value>
151                 javax.servlet.include.request_uri
152             </param-value>
153         </init-param>
154         <init-param>
155             <param-name>redirect-servlet-name</param-name>
156             <param-value>default</param-value>
157         </init-param>
158         <load-on-startup>1</load-on-startup>
159     </servlet>
160     <servlet-mapping>
161         <servlet-name>CXFServlet</servlet-name>
162         <url-pattern>/*</url-pattern>
163     </servlet-mapping>
164
165 </web-app>