svn commit: r1746254 - in /ofbiz/trunk/framework: webapp/config/url.properties webtools/webapp/webtools/WEB-INF/controller.xml

Author: jleroux
Date: Tue May 31 08:39:07 2016
New Revision: 1746254

URL: http://svn.apache.org/viewvc?rev=1746254&view=rev
Log:
A fix for "Use only HTTPS in OFBiz" - https://issues.apache.org/jira/browse/OFBIZ-6849

The tests did not pass because of xmlrpc. Simply adding it in http.request-map.list in url.properties and like for SOAPService request setting <security https="false"/> does it.

Modified:
    ofbiz/trunk/framework/webapp/config/url.properties
    ofbiz/trunk/framework/webtools/webapp/webtools/WEB-INF/controller.xml

Modified: ofbiz/trunk/framework/webapp/config/url.properties
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/webapp/config/url.properties?rev=1746254&r1=1746253&r2=1746254&view=diff
==============================================================================
--- ofbiz/trunk/framework/webapp/config/url.properties (original)
+++ ofbiz/trunk/framework/webapp/config/url.properties Tue May 31 08:39:07 2016
@@ -31,7 +31,7 @@ force.http.host=
 
 # If you want to use HTTP then set no.http=N. Else all requests will use HTTPS except if put in the http.request-map.list  
 no.http=Y
-http.request-map.list=SOAPService
+http.request-map.list=SOAPService,xmlrpc
 
 # Static Content URLs to make it easy to move the serving load for static content to other machines
 # -- thse are for general content such as images, js & css files, or non-dynamic HTML files

Modified: ofbiz/trunk/framework/webtools/webapp/webtools/WEB-INF/controller.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/webtools/webapp/webtools/WEB-INF/controller.xml?rev=1746254&r1=1746253&r2=1746254&view=diff
==============================================================================
--- ofbiz/trunk/framework/webtools/webapp/webtools/WEB-INF/controller.xml (original)
+++ ofbiz/trunk/framework/webtools/webapp/webtools/WEB-INF/controller.xml Tue May 31 08:39:07 2016
@@ -55,6 +55,7 @@ under the License.
         <response name="success" type="none"/>
     </request-map>
     <request-map uri="xmlrpc" track-serverhit="false" track-visit="false">
+        <security https="false"/>
         <event type="xmlrpc"/>
         <response name="error" type="none"/>
         <response name="success" type="none"/>