This is an automated email from the ASF dual-hosted git repository.

martin_s pushed a commit to branch archiva-2.x
in repository https://gitbox.apache.org/repos/asf/archiva.git


The following commit(s) were added to refs/heads/archiva-2.x by this push:
     new 9cf6baa  Avoid Jetty's default directory listing settings in web.xml
9cf6baa is described below

commit 9cf6baaa33822aae8d0f9dbb527573d095eba5f3
Author: Luca <[email protected]>
AuthorDate: Fri Jan 15 17:25:25 2021 +0100

    Avoid Jetty's default directory listing settings in web.xml
    
    The directory listing servlet seems not be needed for the default
    settings. This change explicitly sets it off in web.xml.
    Credis to @jobar for the original change made for Wikimedia.
    
    Git Pull Request #61
    
    Signed-off-by: Martin Stockhammer <[email protected]>
---
 .../archiva-webapp/src/main/webapp/WEB-INF/web.xml          | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git 
a/archiva-modules/archiva-web/archiva-webapp/src/main/webapp/WEB-INF/web.xml 
b/archiva-modules/archiva-web/archiva-webapp/src/main/webapp/WEB-INF/web.xml
index e1ac74b..fd5bea2 100644
--- a/archiva-modules/archiva-web/archiva-webapp/src/main/webapp/WEB-INF/web.xml
+++ b/archiva-modules/archiva-web/archiva-webapp/src/main/webapp/WEB-INF/web.xml
@@ -160,7 +160,18 @@
     <servlet-name>CXFServlet</servlet-name>
     <url-pattern>/restServices/*</url-pattern>
   </servlet-mapping>
-  
+
+  <!-- Removing dir-listing from Jetty default-servlet -->
+  <servlet>
+    <servlet-name>default</servlet-name>
+    <servlet-class>org.eclipse.jetty.servlet.DefaultServlet</servlet-class>
+    <init-param>
+      <param-name>dirAllowed</param-name>
+      <param-value>false</param-value>
+    </init-param>
+    <load-on-startup>0</load-on-startup>
+  </servlet>
+
   <welcome-file-list>
     <welcome-file>index.html</welcome-file>
   </welcome-file-list>

Reply via email to