[KNOX-824] WebAppSec providers don't work with Jersey based services

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.11.0
• Assignee: Sumit Gupta
• Reporter: Sumit Gupta
• Created: 20/Dec/16 22:06
• Updated: 28/Mar/19 14:17
• Resolved: 20/Dec/16 22:27

Description

The following configuration doesn't get applied in deployment (thus doesn't affect the topology) for a Jersey based service in a topology file.

<provider>
            <role>webappsec</role>
            <name>WebAppSec</name>
            <enabled>true</enabled>
            <param><name>csrf.enabled</name><value>true</value></param>
            <param><name>csrf.customHeader</name><value>X-XSRF-Header</value></param>
            <param><name>csrf.methodsToIgnore</name><value>GET,OPTIONS,HEAD</value></param>
            <param><name>cors.enabled</name><value>true</value></param>
            <param><name>xframe-options.enabled</name><value>true</value></param>
        </provider>

Issue Links

• relates to: KNOX-802 Inconsistent gateway.xml deployment descriptors when topology contains application