diff --git a/src/main/java/com/dbnt/faisp/config/TomcatConfiguration.java b/src/main/java/com/dbnt/faisp/config/TomcatConfiguration.java index aa5934c5..6fd4d114 100644 --- a/src/main/java/com/dbnt/faisp/config/TomcatConfiguration.java +++ b/src/main/java/com/dbnt/faisp/config/TomcatConfiguration.java @@ -1,13 +1,17 @@ package com.dbnt.faisp.config; import org.apache.catalina.connector.Connector; +import org.apache.coyote.ProtocolHandler; +import org.apache.coyote.ajp.AbstractAjpProtocol; import org.springframework.beans.factory.annotation.Value; import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory; import org.springframework.boot.web.servlet.server.ServletWebServerFactory; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; -//@Configuration +import java.net.InetAddress; + +@Configuration public class TomcatConfiguration { @Value("${tomcat.ajp.protocol}") @@ -26,6 +30,12 @@ public class TomcatConfiguration { ajpConnector.setSecure(false); ajpConnector.setAllowTrace(false); ajpConnector.setScheme("http"); + ajpConnector.setProperty("address", "0.0.0.0"); + ajpConnector.setProperty("allowedRequestAttributesPattern", ".*"); + if(protocol.contains("AJP")){ + ((AbstractAjpProtocol)ajpConnector.getProtocolHandler()).setSecretRequired(false); + } return ajpConnector; } + } \ No newline at end of file diff --git a/src/main/resources/application-prod.properties b/src/main/resources/application-prod.properties index 8c4a1a91..063984fc 100644 --- a/src/main/resources/application-prod.properties +++ b/src/main/resources/application-prod.properties @@ -1,15 +1,15 @@ -#tomcat.ajp.protocol=HTTP/1.1 +tomcat.ajp.protocol=AJP/1.3 #server.port=80 #file upload -spring.servlet.multipart.location=/home/jboss/faisp/uploadFiles +spring.servlet.multipart.location=/backup/faisp/uploadFiles spring.servlet.multipart.max-file-size=200MB spring.servlet.multipart.max-request-size=500MB site.domain=10.187.58.46:8080 #file -file.dir=C:\\faispUploadFiles +file.dir=/backup/faisp/uploadFiles file.dir.vulnerable=/vulnerable file.dir.part=/part file.dir.equip=/equip