[java-identity-provider] branch master updated: IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=993a5b690523a3e465b266dc5fb8a337790b0bef

The following commit(s) were added to refs/heads/master by this push:
       new  993a5b6   IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
993a5b6 is described below

commit 993a5b690523a3e465b266dc5fb8a337790b0bef
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Aug 29 17:48:50 2018 -0400

    IDP-627 - Support HSTS, CSP, X-Frame-Options, etc.
    
    https://issues.shibboleth.net/jira/browse/IDP-627
    
    Limit applicability to login and admin flows.
---
 idp-war/src/main/webapp/WEB-INF/web.xml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/idp-war/src/main/webapp/WEB-INF/web.xml b/idp-war/src/main/webapp/WEB-INF/web.xml
index 4d9ff2a..111fb8c 100644
--- a/idp-war/src/main/webapp/WEB-INF/web.xml
+++ b/idp-war/src/main/webapp/WEB-INF/web.xml
@@ -79,7 +79,15 @@
     </filter-mapping>
     <filter-mapping>
         <filter-name>DynamicResponseHeaderFilter</filter-name>
-        <url-pattern>/*</url-pattern>
+        <url-pattern>/profile/admin/*</url-pattern>
+        <url-pattern>/profile/Logout</url-pattern>
+        <url-pattern>/profile/Shibboleth/SSO</url-pattern>
+        <url-pattern>/profile/SAML2/Unsolicited/SSO</url-pattern>
+        <url-pattern>/profile/SAML2/Redirect/SSO</url-pattern>
+        <url-pattern>/profile/SAML2/POST/SSO</url-pattern>
+        <url-pattern>/profile/SAML2/POST-SimpleSign/SSO</url-pattern>
+        <url-pattern>/profile/cas/login</url-pattern>
+        <url-pattern>/Authn/*</url-pattern>
     </filter-mapping>
     <filter-mapping>
         <filter-name>CharacterEncodingFilter</filter-name>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.