Change in ovirt-engine[master]: engine: Add header to each response.
Alexander Wels has submitted this change and it was merged.
Change subject: engine: Add header to each response.
......................................................................
engine: Add header to each response.
- This patch adds headers to each response with the option
of defining extra headers in the web.xml. There are 3
headers added by default.
- X-FRAME-OPTIONS: SAMEORIGIN (To stop click jacking)
- X-CONTENT-TYPE-OPTIONS: NOSNIFF (To stop mime type attacks)
- X-XSS-PROTECTION: 1; MODE=BLOCK (To enable IE XSS filter)
Change-Id: I4e9c26dddd0d0300d6b3d078ae763b78600f25d1
Signed-off-by: Alexander Wels <awels(a)redhat.com>
---
M backend/manager/modules/docs/src/main/webapp/WEB-INF/web.xml
M backend/manager/modules/root/src/main/webapp/WEB-INF/web.xml
A
backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/servlet/HeaderFilter.java
A
backend/manager/modules/utils/src/test/java/org/ovirt/engine/core/utils/servlet/HeaderFilterTest.java
M backend/manager/modules/welcome/src/main/webapp/WEB-INF/web.xml
M frontend/webadmin/modules/frontend/src/main/resources/META-INF/web-fragment.xml
M frontend/webadmin/modules/userportal-gwtp/src/main/webapp/WEB-INF/web.xml
M frontend/webadmin/modules/webadmin/src/main/webapp/WEB-INF/web.xml
8 files changed, 258 insertions(+), 0 deletions(-)
Approvals:
Alexander Wels: Verified; Looks good to me, approved
--
To view, visit http://gerrit.ovirt.org/25937
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I4e9c26dddd0d0300d6b3d078ae763b78600f25d1
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alexander Wels <awels(a)redhat.com>
Gerrit-Reviewer: Alexander Wels <awels(a)redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl(a)redhat.com>
Gerrit-Reviewer: Einav Cohen <ecohen(a)redhat.com>
Gerrit-Reviewer: Greg Sheremeta <gshereme(a)redhat.com>
Gerrit-Reviewer: Vojtech Szocs <vszocs(a)redhat.com>
Gerrit-Reviewer: automation(a)ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server