Apache/archiva
1
0
Fork 0
mirror of https://github.com/apache/archiva.git synced 2025-02-10 20:15:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

[MRM-1460] configure XSS parameter check interceptor added in Redback 1.2.7

Browse Source 
git-svn-id: https://svn.apache.org/repos/asf/archiva/branches/archiva-1.3.x@1081116 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Maria Odea B. Ching 2011-03-13 13:56:55 +00:00
parent 283092a7d1
commit 95bfe1b40e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
archiva-modules/archiva-web/archiva-webapp/src/main/resources/struts.xml
View File

@ -33,11 +33,13 @@
<interceptor name="redbackAutoLogin" class="redbackAutoLoginInterceptor"/>
<interceptor name="redbackPolicyEnforcement" class="redbackPolicyEnforcementInterceptor"/>
<interceptor name="paramFilter" class="com.opensymphony.xwork2.interceptor.ParameterFilterInterceptor"/>
<interceptor name="redbackXssParameterCheck" class="redbackXSSParameterCheckInterceptor"/>
<interceptor-stack name="configuredArchivaStack">
<interceptor-ref name="redbackForceAdminUser"/>
<interceptor-ref name="redbackAutoLogin"/>
<interceptor-ref name="defaultStack"/>
<interceptor-ref name="redbackXssParameterCheck"/>
<interceptor-ref name="paramFilter">
<param name="blocked">externalResult</param>
</interceptor-ref>
@ -58,6 +60,7 @@
<interceptor-ref name="redbackForceAdminUser"/>
<interceptor-ref name="redbackAutoLogin"/>
<interceptor-ref name="defaultStack"/>
<interceptor-ref name="redbackXssParameterCheck"/>
<interceptor-ref name="redbackPolicyEnforcement"/>
<interceptor-ref name="redbackSecureActions">
<param name="enableReferrerCheck">false</param>
@ -124,6 +127,8 @@
<param name="namespace">/security</param>
</result>
<result name="possible-xss-attack">/WEB-INF/jsp/redback/possibleXssAttack.jsp</result>
<!-- Generic Catchall for those action configurations that forget to
include a result for 'error' -->
<result name="error">/WEB-INF/jsp/generalError.jsp</result>