[jboss-cvs] JBossAS SVN: r104775 - branches/JBPAPP_5_0/console/src/resources/webconsole.war/WEB-INF.

[jboss-cvs-commits at lists.jboss.org]

Author: bshim
Date: 2010-05-13 14:03:54 -0400 (Thu, 13 May 2010)
New Revision: 104775

Modified:
   branches/JBPAPP_5_0/console/src/resources/webconsole.war/WEB-INF/web.xml
Log:
CVE-2010-0738 - web-console fix

Modified: branches/JBPAPP_5_0/console/src/resources/webconsole.war/WEB-INF/web.xml
===================================================================
--- branches/JBPAPP_5_0/console/src/resources/webconsole.war/WEB-INF/web.xml	2010-05-13 16:48:04 UTC (rev 104774)
+++ branches/JBPAPP_5_0/console/src/resources/webconsole.war/WEB-INF/web.xml	2010-05-13 18:03:54 UTC (rev 104775)
@@ -347,8 +347,6 @@
    role JBossAdmin to access the HTML JMX console web application
    </description>
    <url-pattern>/*</url-pattern>
-   <http-method>GET</http-method>
-   <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
    <role-name>JBossAdmin</role-name>