summaryrefslogtreecommitdiffstats
path: root/openecomp-ui/webapp-heat-validation/WEB-INF
diff options
context:
space:
mode:
authorvasraz <vasyl.razinkov@est.tech>2022-09-07 18:45:20 +0100
committerMichael Morris <michael.morris@est.tech>2022-09-08 10:09:00 +0000
commit013779aedf93a6f6ff878c457de53e729540c252 (patch)
treee01b5f74e4b452a14ac81ebc410bf2c004a9a757 /openecomp-ui/webapp-heat-validation/WEB-INF
parentc37bada019850822df28e2d28f10b64241467fdf (diff)
Fix high-severity bug 'application exposed to path traversal attack'
Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: I7f4b1e8d083cc39f8e57dcedddecc6af56fdc9c2 Issue-ID: SDC-4169
Diffstat (limited to 'openecomp-ui/webapp-heat-validation/WEB-INF')
-rw-r--r--openecomp-ui/webapp-heat-validation/WEB-INF/web.xml11
1 files changed, 8 insertions, 3 deletions
diff --git a/openecomp-ui/webapp-heat-validation/WEB-INF/web.xml b/openecomp-ui/webapp-heat-validation/WEB-INF/web.xml
index f84519eee3..013ab32715 100644
--- a/openecomp-ui/webapp-heat-validation/WEB-INF/web.xml
+++ b/openecomp-ui/webapp-heat-validation/WEB-INF/web.xml
@@ -1,8 +1,8 @@
<?xml version="1.0" encoding="ISO-8859-1"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee"
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
- version="3.0">
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"
+ version="3.0">
<display-name>Heat-Validation</display-name>
@@ -24,6 +24,11 @@
</init-param>
</servlet>
+ <context-param>
+ <param-name>org.eclipse.jetty.servlet.Default.dirAllowed</param-name>
+ <param-value>false</param-value>
+ </context-param>
+
<servlet-mapping>
<servlet-name>js</servlet-name>
<url-pattern>*.js</url-pattern>