CB-1718 Restrict directory listing

This commit is contained in:
Serge Rider
2022-02-24 09:42:58 +03:00
parent 1345751a02
commit 48229cef64
@@ -60,9 +60,16 @@ public class CBJettyServer {
servletContextHandler.setResourceBase(application.getContentRoot());
String rootURI = application.getRootURI();
servletContextHandler.setContextPath(rootURI);
servletContextHandler.addServlet(new ServletHolder("static", new CBStaticServlet()), "/*");
ServletHolder staticServletHolder = new ServletHolder("static", new CBStaticServlet());
staticServletHolder.setInitParameter("dirAllowed", "false");
servletContextHandler.addServlet(staticServletHolder, "/*");
ServletHolder imagesServletHolder = new ServletHolder("images", new CBImageServlet());
servletContextHandler.addServlet(imagesServletHolder, application.getServicesURI() + "images/*");
servletContextHandler.addServlet(new ServletHolder("status", new CBStatusServlet()), "/status");
servletContextHandler.addServlet(new ServletHolder("images", new CBImageServlet()), application.getServicesURI() + "images/*");
servletContextHandler.addServlet(new ServletHolder("graphql", new GraphQLEndpoint()), application.getServicesURI() + "gql/*");
servletContextHandler.addEventListener(new CBServerContextListener());