Fix high-severity bug 'application exposed to path traversal attack'

[sdc.git] / dox-sequence-diagram-ui / src / main / webapp / WEB-INF / web.xml

diff --git a/dox-sequence-diagram-ui/src/main/webapp/WEB-INF/web.xml b/dox-sequence-diagram-ui/src/main/webapp/WEB-INF/web.xml
index c723615..01ca867 100644 (file)
--- a/dox-sequence-diagram-ui/src/main/webapp/WEB-INF/web.xml
+++ b/dox-sequence-diagram-ui/src/main/webapp/WEB-INF/web.xml
@@ -1,14 +1,18 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <web-app id="Amdocs_ES6_Blueprint" version="3.0"
-    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xmlns="http://java.sun.com/xml/ns/javaee"
     xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
 
-       <display-name>Amdocs ES6 Blueprint</display-name>
+    <display-name>Amdocs ES6 Blueprint</display-name>
 
-       <welcome-file-list>
-               <welcome-file>index.html</welcome-file>
-       </welcome-file-list>
+    <welcome-file-list>
+        <welcome-file>index.html</welcome-file>
+    </welcome-file-list>
+    <context-param>
+        <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
+        <param-value>false</param-value>
+    </context-param>
 
 </web-app>