|
27 | 27 | <path-exception>/index.html</path-exception> |
28 | 28 | <path-exception>/login.jsp</path-exception> |
29 | 29 | <path-exception>/index.jsp</path-exception> |
30 | | - <path-exception type="regex">/images/*</path-exception> |
| 30 | + <path-exception type="regex">/images/.*</path-exception> |
31 | 31 | <path-exception type="regex">/css/.*</path-exception> |
32 | 32 | <path-exception type="regex">/help/.*</path-exception> |
33 | 33 | </authentication-rules> |
34 | 34 |
|
35 | 35 | <authorization-rules> |
36 | 36 |
|
37 | | - <restrict-source-ip type="regex" ip-regex="(192\.168\.1\\..*|127.0.0.1)">/admin/*</restrict-source-ip> |
| 37 | + <restrict-source-ip type="regex" ip-regex="(192\.168\.1\\..*|127.0.0.1)">/admin/.*</restrict-source-ip> |
38 | 38 |
|
39 | 39 | <!-- operator contains,equals,inList,exists --> |
40 | | - <must-match path="/admin/.*" variable="request.header.x-roles" operator="contains" value="admin"/> |
| 40 | + <must-match path="^/admin/.*" variable="request.header.x-roles" operator="contains" value="admin"/> |
41 | 41 |
|
42 | 42 | </authorization-rules> |
43 | 43 |
|
44 | 44 | <url-rules> |
45 | 45 | <restrict-extension allow=".(do|css|jpg|gif)"/> |
46 | 46 |
|
47 | | - <restrict-method deny="GET" path="*.do"/> |
| 47 | + <restrict-method deny="GET" path=".*\.do$"/> |
48 | 48 | <restrict-method allow="(GET|POST|TRACE)"/> |
49 | 49 |
|
50 | | - <enforce-https path="/*"> |
51 | | - <exception path="/index.html" /> |
52 | | - <exception path="/index.jsp" /> |
53 | | - <exception path="/images/*" /> |
54 | | - <exception path="/css/.*" /> |
55 | | - <exception path="/help/.*" /> |
| 50 | + <enforce-https path="/.*"> |
| 51 | + <path-exception>/index.html</path-exception> |
| 52 | + <path-exception>/index.jsp</path-exception> |
| 53 | + <path-exception type="regex">/images/.*</path-exception> |
| 54 | + <path-exception type="regex">/css/.*</path-exception> |
| 55 | + <path-exception type="regex">/help/.*</path-exception> |
56 | 56 | </enforce-https> |
57 | 57 | </url-rules> |
58 | 58 |
|
|
86 | 86 |
|
87 | 87 | <virtual-patches> |
88 | 88 | <virtual-patch id="1234" path="/foo.jsp" variable="request.parameters.bar" pattern="[0-9a-zA-Z]" message="zomg attax"/> |
89 | | - |
90 | 89 | </virtual-patches> |
91 | 90 |
|
92 | 91 | <!-- act on outbound headers and data --> |
|
101 | 100 | </add-http-only-flag> |
102 | 101 |
|
103 | 102 | <dynamic-insertion pattern="</body>"> |
104 | | - <![CDATA[ ]]> |
| 103 | + <![CDATA[]]> |
105 | 104 | </dynamic-insertion> |
106 | 105 |
|
107 | 106 | </outbound-rules> |
|
0 commit comments