parent
596b25a5ab
commit
4d65bb704c
@ -0,0 +1,84 @@
|
||||
{
|
||||
"welcomeFiles": [
|
||||
"index.html"
|
||||
],
|
||||
"urlMappings": [
|
||||
{
|
||||
"url": "/login",
|
||||
"path": "/index.html"
|
||||
},
|
||||
{
|
||||
"url": "/assets/apps",
|
||||
"path": "/index.html"
|
||||
}
|
||||
],
|
||||
"listeners": [
|
||||
{
|
||||
"class": "org.owasp.csrfguard.CsrfGuardServletContextListener"
|
||||
},
|
||||
{
|
||||
"class": "org.owasp.csrfguard.CsrfGuardHttpSessionListener"
|
||||
}
|
||||
],
|
||||
"servlets": [
|
||||
{
|
||||
"name": "JavaScriptServlet",
|
||||
"class": "org.owasp.csrfguard.servlet.JavaScriptServlet"
|
||||
}
|
||||
],
|
||||
"servletMappings": [
|
||||
{
|
||||
"name": "JavaScriptServlet",
|
||||
"url": "/csrf.js"
|
||||
}
|
||||
],
|
||||
"contextParams": [
|
||||
{
|
||||
"name": "Owasp.CsrfGuard.Config",
|
||||
"value": "repository/conf/security/Owasp.CsrfGuard.dashboard.properties"
|
||||
}
|
||||
],
|
||||
"filters": [
|
||||
{
|
||||
"name": "ContentTypeBasedCachePreventionFilter",
|
||||
"class": "org.wso2.carbon.ui.filters.cache.ContentTypeBasedCachePreventionFilter",
|
||||
"params" : [
|
||||
{"name" : "patterns", "value" : "text/html\" ,application/json\" ,text/plain"},
|
||||
{"name" : "filterAction", "value" : "enforce"},
|
||||
{"name" : "httpHeaders", "value" : "Cache-Control: no-store, no-cache, must-revalidate, private"}
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "HttpHeaderSecurityFilter",
|
||||
"class": "org.apache.catalina.filters.HttpHeaderSecurityFilter",
|
||||
"params": [
|
||||
{
|
||||
"name": "hstsEnabled",
|
||||
"value": "false"
|
||||
},
|
||||
{
|
||||
"name": "antiClickJackingOption",
|
||||
"value": "SAMEORIGIN"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"name" : "CSRFGuard",
|
||||
"class" : "org.owasp.csrfguard.CsrfGuardFilter"
|
||||
}
|
||||
],
|
||||
"filterMappings": [
|
||||
{
|
||||
"name": "HttpHeaderSecurityFilter",
|
||||
"url": "*"
|
||||
},
|
||||
{
|
||||
"name" : "CSRFGuard",
|
||||
"url" : "/*"
|
||||
},
|
||||
{
|
||||
"name":"ContentTypeBasedCachePreventionFilter",
|
||||
"url":"*"
|
||||
}
|
||||
]
|
||||
}
|
Loading…
Reference in new issue