[jboss-dev-forums] [JBoss Web Development] - Re: Disable wsdl publication

[Martin Gustafsson]

Martin Gustafsson [https://community.jboss.org/people/emartgu] created the discussion

"Re: Disable wsdl publication"

To view the discussion, visit: https://community.jboss.org/message/811393#811393

--------------------------------------------------------------
It's possible to use JBossWeb's  https://access.redhat.com/site/solutions/189423 RewriteValve to have JBossWeb intercept WSDL requests and return an HTTP 403 forbidden response before the request is passed on to JBossWS.
An example rewrite valve's rewrite pattern to disable access to "?wsdl" pages by providing a 403 forbidden access response:

<subsystem xmlns="urn:jboss:domain:web:1.2" default-virtual-server="default-host" native="false">
    <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http"/>
    <virtual-server name="default-host" enable-welcome-root="true">
        <alias name="localhost"/>
        <alias name="example.com"/>
*        <rewrite pattern="(.*)" substitution="-" flags="F">*
*             <condition test="%{QUERY_STRING}" pattern="wsdl" flags="OR"/>*
*        </rewrite>*
    </virtual-server>
</subsystem>

--------------------------------------------------------------

Reply to this message by going to Community
[https://community.jboss.org/message/811393#811393]

Start a new discussion in JBoss Web Development at Community
[https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2112]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20130503/a316f2de/attachment.html