54 lines
1.1 KiB
Plaintext
54 lines
1.1 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
<!-- Tomcat 7+ Cors Filter -->
|
|
<filter>
|
|
<filter-name>CorsFilter</filter-name>
|
|
<filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
|
|
<init-param>
|
|
<param-name>cors.allowed.origins</param-name>
|
|
<param-value>*</param-value> <!-- Sensitive -->
|
|
</init-param>
|
|
</filter>
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
[source,xml]
|
|
----
|
|
<!-- Tomcat 7+ Cors Filter -->
|
|
<filter>
|
|
<filter-name>CorsFilter</filter-name>
|
|
<filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
|
|
<init-param>
|
|
<param-name>cors.allowed.origins</param-name>
|
|
<param-value>https://trusted1.org,https://trusted2.org</param-value> <!-- Compliant -->
|
|
</init-param>
|
|
</filter>
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../message.adoc[]
|
|
|
|
include::../highlighting.adoc[]
|
|
|
|
'''
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::../comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|