Fix high-severity bug 'application exposed to path traversal attack'
[sdc.git] / openecomp-be / api / openecomp-sdc-rest-webapp / onboarding-rest-war / src / main / webapp / WEB-INF / web.xml
1 <web-app
2     xmlns="http://java.sun.com/xml/ns/javaee"
3     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
4     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
5     version="3.0">
6
7
8     <!-- Spring -->
9     <context-param>
10         <param-name>contextConfigLocation</param-name>
11         <param-value>WEB-INF/beans-services.xml</param-value>
12     </context-param>
13
14     <context-param>
15         <param-name>org.togglz.core.manager.TogglzConfig</param-name>
16         <param-value>org.openecomp.sdc.be.togglz.TogglzConfiguration</param-value>
17     </context-param>
18
19     <context-param>
20         <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
21         <param-value>false</param-value>
22     </context-param>
23
24     <listener>
25         <listener-class>org.openecomp.server.listeners.OnboardingAppStartupListener</listener-class>
26     </listener>
27
28     <filter>
29         <filter-name>PermissionsFilter</filter-name>
30         <filter-class>org.openecomp.sdc.itempermissions.servlet.PermissionsFilter</filter-class>
31     </filter>
32     <filter-mapping>
33         <filter-name>PermissionsFilter</filter-name>
34         <url-pattern>/v1.0/vendor-license-models/*</url-pattern>
35     </filter-mapping>
36     <filter-mapping>
37         <filter-name>PermissionsFilter</filter-name>
38         <url-pattern>/v1.0/vendor-software-products/*</url-pattern>
39     </filter-mapping>
40
41     <filter>
42         <filter-name>cross-origin</filter-name>
43         <filter-class>org.eclipse.jetty.servlets.CrossOriginFilter</filter-class>
44         <init-param>
45             <param-name>allowedOrigins</param-name>
46             <param-value>*</param-value>
47         </init-param>
48         <init-param>
49             <param-name>allowedMethods</param-name>
50             <param-value>*</param-value>
51         </init-param>
52         <init-param>
53             <param-name>allowedHeaders</param-name>
54             <param-value>*</param-value>
55         </init-param>
56     </filter>
57
58     <filter>
59         <filter-name>RestrictionAccessFilter</filter-name>
60         <filter-class>org.openecomp.server.filters.RestrictionAccessFilter</filter-class>
61         <async-supported>true</async-supported>
62     </filter>
63     <filter-mapping>
64         <filter-name>RestrictionAccessFilter</filter-name>
65         <url-pattern>/*</url-pattern>
66     </filter-mapping>
67     <filter>
68         <filter-name>BasicAuth</filter-name>
69         <filter-class>org.openecomp.server.filters.BasicAuthenticationFilter</filter-class>
70     </filter>
71     <filter>
72         <filter-name>AuthN</filter-name>
73         <filter-class>org.openecomp.server.filters.ActionAuthenticationFilter</filter-class>
74     </filter>
75     <filter>
76         <filter-name>AuthZ</filter-name>
77         <filter-class>org.openecomp.server.filters.ActionAuthorizationFilter</filter-class>
78     </filter>
79     <filter-mapping>
80         <filter-name>cross-origin</filter-name>
81         <url-pattern>/*</url-pattern>
82     </filter-mapping>
83     <filter-mapping>
84         <filter-name>BasicAuth</filter-name>
85         <url-pattern>/1.0/*</url-pattern>
86     </filter-mapping>
87     <filter-mapping>
88         <filter-name>AuthN</filter-name>
89         <url-pattern>/workflow/v1.0/actions/*</url-pattern>
90     </filter-mapping>
91     <filter-mapping>
92         <filter-name>AuthZ</filter-name>
93         <url-pattern>/workflow/v1.0/actions/*</url-pattern>
94     </filter-mapping>
95     <filter>
96         <filter-name>SessionContextFilter</filter-name>
97         <filter-class>org.openecomp.server.filters.OnboardingSessionContextFilter</filter-class>
98     </filter>
99     <filter-mapping>
100         <filter-name>SessionContextFilter</filter-name>
101         <url-pattern>/*</url-pattern>
102     </filter-mapping>
103     <!-- Spring WS Mapping -->
104     <servlet>
105         <servlet-name>spring-mapper</servlet-name>
106         <servlet-class>
107             org.springframework.web.servlet.DispatcherServlet
108         </servlet-class>
109         <load-on-startup>1</load-on-startup>
110     </servlet>
111     <!-- CXF -->
112     <servlet>
113         <servlet-name>CXFServlet</servlet-name>
114         <servlet-class>
115             org.apache.cxf.transport.servlet.CXFServlet
116         </servlet-class>
117         <init-param>
118             <param-name>redirects-list</param-name>
119             <param-value>
120                 /docs/(\S)+\.json
121             </param-value>
122         </init-param>
123         <init-param>
124             <param-name>redirect-attributes</param-name>
125             <param-value>
126                 javax.servlet.include.request_uri
127             </param-value>
128         </init-param>
129         <init-param>
130             <param-name>redirect-servlet-name</param-name>
131             <param-value>default</param-value>
132         </init-param>
133         <load-on-startup>1</load-on-startup>
134     </servlet>
135     <servlet-mapping>
136         <servlet-name>spring-mapper</servlet-name>
137         <url-pattern>/ws/*</url-pattern>
138     </servlet-mapping>
139     <servlet-mapping>
140         <servlet-name>CXFServlet</servlet-name>
141         <url-pattern>/*</url-pattern>
142     </servlet-mapping>
143
144 </web-app>