[activemq-artemis] branch main updated: ARTEMIS-3454 prevent directory listing for deployed web apps

[gtully]

This is an automated email from the ASF dual-hosted git repository.

gtully pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-artemis.git


The following commit(s) were added to refs/heads/main by this push:
     new 4569263  ARTEMIS-3454 prevent directory listing for deployed web apps
4569263 is described below

commit 4569263c04acd5c444c7e9596efdd3e9758d04d9
Author: Justin Bertram <jbert...@apache.org>
AuthorDate: Wed Sep 1 12:45:56 2021 -0500

    ARTEMIS-3454 prevent directory listing for deployed web apps
---
 .../java/org/apache/activemq/artemis/component/WebServerComponent.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git 
a/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
 
b/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
index e21191c..c03a3fe 100644
--- 
a/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
+++ 
b/artemis-web/src/main/java/org/apache/activemq/artemis/component/WebServerComponent.java
@@ -147,6 +147,7 @@ public class WebServerComponent implements 
ExternalComponent {
                dirToUse = instanceWarDir;
             }
             WebAppContext webContext = deployWar(app.url, app.war, dirToUse);
+            
webContext.setInitParameter("org.eclipse.jetty.servlet.Default.dirAllowed", 
"false");
             webContexts.add(webContext);
             if (app.war.startsWith("console")) {
                consoleUrl = webServerConfig.bind + "/" + app.url;