解决cxf Available SOAP services暴漏其他接口

最新推荐文章于 2023-07-20 17:19:52 发布

最新推荐文章于 2023-07-20 17:19:52 发布 · 4k 阅读

文章标签：

#java

本文介绍如何通过配置CXFServlet的初始化参数来隐藏服务列表页面，避免因暴露不必要的信息而带来的潜在安全风险。


<servlet>
      <servlet-name>CXFServlet</servlet-name>
      <servlet-class>org.apache.cxf.transport.servlet.CXFServlet</servlet-class>
     <init-param>
         <description>Hides the listing of available services when set to true.
            It is considered a security risk to set this to false (or leave it unset),
        because a container should never give more information to the client
        than is necessary to function properly.</description>
       <param-name>hide-service-list-page</param-name>
        <param-value>true</param-value>
      </init-param>
    </servlet>
    <servlet-mapping>
     <servlet-name>CXFServlet</servlet-name>
     <url-pattern>/services/*</url-pattern>
   </servlet-mapping>