Author: alex.guizar(a)jboss.com Date: 2010-05-17 19:34:36 -0400 (Mon, 17 May 2010) New Revision: 6356 Modified: projects/jsf-console/branches/jsf-console-3.2-soa/console/src/main/webapp/WEB-INF/web.xml projects/jsf-console/branches/jsf-console-3.2-soa/gpd-deployer/src/main/webapp/WEB-INF/web.xml projects/jsf-console/branches/jsf-console-3.2-soa/soa/src/main/webapp/WEB-INF/web.xml Log: SOA-2008: secure all http methods, not just get and post Modified: projects/jsf-console/branches/jsf-console-3.2-soa/console/src/main/webapp/WEB-INF/web.xml =================================================================== --- projects/jsf-console/branches/jsf-console-3.2-soa/console/src/main/webapp/WEB-INF/web.xml 2010-05-17 01:56:55 UTC (rev 6355) +++ projects/jsf-console/branches/jsf-console-3.2-soa/console/src/main/webapp/WEB-INF/web.xml 2010-05-17 23:34:36 UTC (rev 6356) @@ -59,8 +59,6 @@ <web-resource-collection> <web-resource-name>Secure Area</web-resource-name> <url-pattern>/app/*</url-pattern> - <http-method>GET</http-method> - <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>user</role-name> Modified: projects/jsf-console/branches/jsf-console-3.2-soa/gpd-deployer/src/main/webapp/WEB-INF/web.xml =================================================================== --- projects/jsf-console/branches/jsf-console-3.2-soa/gpd-deployer/src/main/webapp/WEB-INF/web.xml 2010-05-17 01:56:55 UTC (rev 6355) +++ projects/jsf-console/branches/jsf-console-3.2-soa/gpd-deployer/src/main/webapp/WEB-INF/web.xml 2010-05-17 23:34:36 UTC (rev 6356) @@ -26,7 +26,6 @@ <description>If you are deploying to JBoss AS, be sure to specify the security domain in jboss-web.xml.</description> <url-pattern>/upload/*</url-pattern> - <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <description>Optionally customize the role name to require a login before Modified: projects/jsf-console/branches/jsf-console-3.2-soa/soa/src/main/webapp/WEB-INF/web.xml =================================================================== --- projects/jsf-console/branches/jsf-console-3.2-soa/soa/src/main/webapp/WEB-INF/web.xml 2010-05-17 01:56:55 UTC (rev 6355) +++ projects/jsf-console/branches/jsf-console-3.2-soa/soa/src/main/webapp/WEB-INF/web.xml 2010-05-17 23:34:36 UTC (rev 6356) @@ -59,8 +59,6 @@ <web-resource-collection> <web-resource-name>Secure Area</web-resource-name> <url-pattern>/app/*</url-pattern> - <http-method>GET</http-method> - <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>user</role-name>