|
@@ -5,16 +5,13 @@
|
|
|
<context-param>
|
|
|
<param-name>contextConfigLocation</param-name>
|
|
|
<param-value>/WEB-INF/sso/applicationContext-ssoClient.xml</param-value>
|
|
|
- </context-param>
|
|
|
- <context-param>
|
|
|
+ </context-param><context-param>
|
|
|
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
|
|
|
<param-value>client</param-value>
|
|
|
- </context-param>
|
|
|
- <context-param>
|
|
|
- <param-name>facelets.SKIP_COMMENTS</param-name>
|
|
|
- <param-value>true</param-value>
|
|
|
- </context-param>
|
|
|
- <context-param>
|
|
|
+ </context-param><context-param>
|
|
|
+ <param-name>facelets.SKIP_COMMENTS</param-name>
|
|
|
+ <param-value>true</param-value>
|
|
|
+ </context-param><context-param>
|
|
|
<param-name>
|
|
|
org.operamasks.faces.IMPLICIT_NAVIGATION
|
|
|
</param-name>
|
|
@@ -40,89 +37,96 @@
|
|
|
</param-name>
|
|
|
<param-value>/WEB-INF/attributeSetting.properties</param-value>
|
|
|
</context-param>
|
|
|
+
|
|
|
<!--cas 3.0 client begin-->
|
|
|
<context-param>
|
|
|
<param-name>facelets.LIBRARIES</param-name>
|
|
|
<param-value>/WEB-INF/taglib/waf.taglib.xml</param-value>
|
|
|
</context-param>
|
|
|
+
|
|
|
<!-- value: development, production -->
|
|
|
<context-param>
|
|
|
<param-name>productionMode</param-name>
|
|
|
<param-value>production</param-value>
|
|
|
</context-param>
|
|
|
- <!-- Light App login filter begin -->
|
|
|
- <filter>
|
|
|
- <filter-name>CAS Single Sign Out Filter</filter-name>
|
|
|
- <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
|
|
|
+ <!-- Light App login filter begin -->
|
|
|
+ <filter>
|
|
|
+ <filter-name>CAS Single Sign Out Filter</filter-name>
|
|
|
+ <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
|
|
|
</filter>
|
|
|
- <filter>
|
|
|
+ <filter>
|
|
|
<filter-name>encodingFilter</filter-name>
|
|
|
<filter-class>
|
|
|
org.springframework.web.filter.CharacterEncodingFilter
|
|
|
</filter-class>
|
|
|
- <init-param>
|
|
|
+ <init-param>
|
|
|
<param-name>encoding</param-name>
|
|
|
<param-value>UTF-8</param-value>
|
|
|
</init-param>
|
|
|
- <init-param>
|
|
|
+ <init-param>
|
|
|
<param-name>forceEncoding</param-name>
|
|
|
<param-value>true</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>encodingFilter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>encodingFilter</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<!-- order:1 SHRRequestParamWrapFilter -->
|
|
|
<filter>
|
|
|
<filter-name>SHRRequestParamWrapFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRRequestParameterWrapFilter</filter-class>
|
|
|
<init-param>
|
|
|
- <param-name>enableSHRRequestParamWrapFilter</param-name>
|
|
|
- <param-value>true</param-value>
|
|
|
- </init-param>
|
|
|
+ <param-name>enableSHRRequestParamWrapFilter</param-name>
|
|
|
+ <param-value>true</param-value>
|
|
|
+ </init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRRequestParamWrapFilter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
<!-- order:2 XSSFilter -->
|
|
|
- <filter>
|
|
|
+ <filter>
|
|
|
<filter-name>XSSFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.XSSFilter</filter-class>
|
|
|
<init-param>
|
|
|
<!--request uipkWhiteList , if request uipk include uipkWhiteList,then ignore filter -->
|
|
|
- <param-name>uipkAndHandlerWhiteList</param-name>
|
|
|
- <param-value>
|
|
|
+ <param-name>uipkAndHandlerWhiteList</param-name>
|
|
|
+ <param-value>
|
|
|
com.kingdee.shr.base.syssetting.app.UIView.form,
|
|
|
sourcecompare,
|
|
|
com.kingdee.shr.base.syssetting.app.PrivacyAgreement.form,
|
|
|
com.kingdee.shr.baseconfig.app.DocumentationConfig.form,
|
|
|
com.kingdee.shr.base.syssetting.app.FieldRule.form
|
|
|
</param-value>
|
|
|
- </init-param>
|
|
|
+ </init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>XSSFilter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<!-- order:3 SQLInjectionFilter -->
|
|
|
<filter>
|
|
|
<filter-name>SQLInjectionFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.SQLInjectionFilter</filter-class>
|
|
|
<init-param>
|
|
|
- <param-name>enableSQLInjectionFilter</param-name>
|
|
|
- <!--enableSQLInjectionFilter default value is true,if need turn on,change value is : false -->
|
|
|
- <param-value>true</param-value>
|
|
|
- </init-param>
|
|
|
+ <param-name>enableSQLInjectionFilter</param-name>
|
|
|
+ <!--enableSQLInjectionFilter default value is true,if need turn on,change value is : false -->
|
|
|
+ <param-value>true</param-value>
|
|
|
+ </init-param>
|
|
|
<init-param>
|
|
|
<!--request uipkWhiteList , if request uipk include uipkWhiteList,then ignore filter -->
|
|
|
- <param-name>uipkWhiteList</param-name>
|
|
|
- <param-value>
|
|
|
+ <param-name>uipkWhiteList</param-name>
|
|
|
+ <param-value>
|
|
|
com.kingdee.shr.dataplatform.app.CustomSQL.form,
|
|
|
com.kingdee.shr.dataplatform.app.DataSetConfig.form,
|
|
|
com.kingdee.shr.base.syssetting.app.UIView.form,
|
|
@@ -134,7 +138,7 @@
|
|
|
com.kingdee.shr.compensation.app.FormulaFunc.form,
|
|
|
com.kingdee.shr.compensation.app.FormulaTmpTable.form
|
|
|
</param-value>
|
|
|
- </init-param>
|
|
|
+ </init-param>
|
|
|
<init-param>
|
|
|
<!--sql key wrod , if request value include drop or delete .... ,then replace -->
|
|
|
<param-name>sqlKeyWord</param-name>
|
|
@@ -149,19 +153,21 @@
|
|
|
<param-value>permItemId,personId,personID,relatedFieldId,serviceId,rootId,nodeId,billId,orgId,orgid,serviceName,uipk,sorterItems,parameters,sidx,sord,query,staffingId,staffId,uiClass,keyField,nd,objectID,proposerName,attendPeriodId,attendanceGroupID,proposerId,attendPolicyId,orgLongNum,bizManageTypeID,billIdParam,personid,positionId</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SQLInjectionFilter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <!-- Light App login filter begin -->
|
|
|
- <filter>
|
|
|
- <filter-name>Light App Login Filter</filter-name>
|
|
|
- <filter-class>com.kingdee.shr.lightapp.filter.LightAppLoginFilter</filter-class>
|
|
|
+
|
|
|
+ <!-- Light App login filter begin -->
|
|
|
+ <filter>
|
|
|
+ <filter-name>Light App Login Filter</filter-name>
|
|
|
+ <filter-class>com.kingdee.shr.lightapp.filter.LightAppLoginFilter</filter-class>
|
|
|
</filter>
|
|
|
<filter-mapping>
|
|
|
- <filter-name>Light App Login Filter</filter-name>
|
|
|
- <url-pattern>/*</url-pattern>
|
|
|
+ <filter-name>Light App Login Filter</filter-name>
|
|
|
+ <url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<!-- AppScanAttackFilter -->
|
|
|
<filter>
|
|
|
<filter-name>AppScanAttackFilter</filter-name>
|
|
@@ -171,12 +177,13 @@
|
|
|
<param-value>true</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>AppScanAttackFilter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<!-- order:4 DisableUrlSessionFilter -->
|
|
|
- <filter>
|
|
|
+ <filter>
|
|
|
<filter-name>DisableUrlSessionFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.DisableUrlSessionFilter</filter-class>
|
|
|
<init-param>
|
|
@@ -186,14 +193,15 @@
|
|
|
</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>DisableUrlSessionFilter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>DisableUrlSessionFilter</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>SHRAuthentiactionFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRAuthenticationFilter</filter-class>
|
|
@@ -203,22 +211,24 @@
|
|
|
</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRAuthentiactionFilter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRAuthentiactionFilter</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRAuthentiactionFilter</filter-name>
|
|
|
<url-pattern>*.html</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRAuthentiactionFilter</filter-name>
|
|
|
<url-pattern>*.htm</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>CAS Authentication Filter</filter-name>
|
|
|
<filter-class>
|
|
@@ -229,10 +239,12 @@
|
|
|
<param-value>casAuthenticationFilter</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS Authentication Filter</filter-name>
|
|
|
- <url-pattern>/*</url-pattern>
|
|
|
+
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS Authentication Filter</filter-name>
|
|
|
+ <url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>CAS Validation Filter</filter-name>
|
|
|
<filter-class>
|
|
@@ -243,10 +255,12 @@
|
|
|
<param-value>casTicketValidationFilter</param-value>
|
|
|
</init-param>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS Validation Filter</filter-name>
|
|
|
- <url-pattern>/*</url-pattern>
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS Validation Filter</filter-name>
|
|
|
+ <url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
<filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
|
|
@@ -257,10 +271,13 @@
|
|
|
com.kingdee.bos.waf.intercepter.ExtensionFilter
|
|
|
</filter-class>
|
|
|
</filter-->
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>ContextConstructorFilter</filter-name>
|
|
|
<filter-class>com.kingdee.bos.sso.client.filter.ContextConstructorFilter</filter-class>
|
|
@@ -270,6 +287,7 @@
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
<!-- SSO 结束 -->
|
|
|
+
|
|
|
<!-- 暂时禁用性能监控filter
|
|
|
<filter>
|
|
|
<filter-name>PerfLog Filter</filter-name>
|
|
@@ -281,15 +299,17 @@
|
|
|
<url-pattern>*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
-->
|
|
|
+
|
|
|
<!--filter-mapping>
|
|
|
<filter-name>CAS Single Sign Out Filter</filter-name>
|
|
|
<url-pattern>/*</url-pattern>
|
|
|
</filter-mapping-->
|
|
|
+
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS Validation Filter</filter-name>
|
|
|
<url-pattern>/wfdesigner/*</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping><filter-mapping>
|
|
|
<filter-name>CAS Authentication Filter</filter-name>
|
|
|
<url-pattern>/wfdesigner/*</url-pattern>
|
|
|
</filter-mapping>
|
|
@@ -311,6 +331,7 @@
|
|
|
<filter-name>CAS Authentication Filter</filter-name>
|
|
|
<url-pattern>/servlet/ListServlet</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS Validation Filter</filter-name>
|
|
|
<url-pattern>/servlet/BillServlet</url-pattern>
|
|
@@ -319,6 +340,7 @@
|
|
|
<filter-name>CAS Validation Filter</filter-name>
|
|
|
<url-pattern>/servlet/ListServlet</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS Authentication Filter</filter-name>
|
|
|
<url-pattern>/wf-portal/*</url-pattern>
|
|
@@ -331,18 +353,20 @@
|
|
|
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
<url-pattern>/wf-portal/*</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
- <filter-name>CAS Authentication Filter</filter-name>
|
|
|
- <url-pattern>/workflow/*</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS Validation Filter</filter-name>
|
|
|
- <url-pattern>/workflow/*</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
- <url-pattern>/workflow/*</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
+ <filter-name>CAS Authentication Filter</filter-name>
|
|
|
+ <url-pattern>/workflow/*</url-pattern>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS Validation Filter</filter-name>
|
|
|
+ <url-pattern>/workflow/*</url-pattern>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
+ <url-pattern>/workflow/*</url-pattern>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS Authentication Filter</filter-name>
|
|
|
<url-pattern>/billdigesttools/*.jsp</url-pattern>
|
|
@@ -355,21 +379,26 @@
|
|
|
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
<url-pattern>/billdigesttools/*.jsp</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
+
|
|
|
<!--filter-mapping>
|
|
|
|
|
|
<filter-name>WafFilter</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
</filter-mapping-->
|
|
|
+
|
|
|
<!--cas 3.0 client end-->
|
|
|
+
|
|
|
<filter>
|
|
|
- <filter-name>SHRWeb RPC Filter</filter-name>
|
|
|
- <filter-class>com.kingdee.shr.base.syssetting.filter.SHRWebRPCFilter</filter-class>
|
|
|
- </filter>
|
|
|
- <!--EASWeb RPC Filter-->
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>SHRWeb RPC Filter</filter-name>
|
|
|
- <url-pattern>/*</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
+ <filter-name>SHRWeb RPC Filter</filter-name>
|
|
|
+ <filter-class>com.kingdee.shr.base.syssetting.filter.SHRWebRPCFilter</filter-class>
|
|
|
+ </filter>
|
|
|
+ <!--EASWeb RPC Filter-->
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>SHRWeb RPC Filter</filter-name>
|
|
|
+ <url-pattern>/*</url-pattern>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
<!-- <filter-mapping>
|
|
|
<filter-name>WafFilter</filter-name>
|
|
|
<url-pattern>*.jsf</url-pattern>
|
|
@@ -390,53 +419,56 @@
|
|
|
<filter-name>WafFilter</filter-name>
|
|
|
<url-pattern>/servlet/BillListServlet</url-pattern>
|
|
|
</filter-mapping> -->
|
|
|
- <filter>
|
|
|
- <filter-name>User Monitor</filter-name>
|
|
|
- <filter-class>com.kingdee.eas.hr.base.web.UserMonitorFilter</filter-class>
|
|
|
- </filter>
|
|
|
- <filter-mapping>
|
|
|
+
|
|
|
+ <filter>
|
|
|
+ <filter-name>User Monitor</filter-name>
|
|
|
+ <filter-class>com.kingdee.eas.hr.base.web.UserMonitorFilter</filter-class>
|
|
|
+ </filter>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>User Monitor</filter-name>
|
|
|
<url-pattern>*.action</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>User Monitor</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>User Monitor</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>User Monitor</filter-name>
|
|
|
<url-pattern>*.html</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter>
|
|
|
- <filter-name>HR context Filter</filter-name>
|
|
|
- <filter-class>com.kingdee.shr.base.filter.HRContextFilter</filter-class>
|
|
|
- </filter>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
+ <filter>
|
|
|
+ <filter-name>HR context Filter</filter-name>
|
|
|
+ <filter-class>com.kingdee.shr.base.filter.HRContextFilter</filter-class>
|
|
|
+ </filter>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>HR context Filter</filter-name>
|
|
|
<url-pattern>*.action</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>HR context Filter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>HR context Filter</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>HR context Filter</filter-name>
|
|
|
<url-pattern>*.html</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter>
|
|
|
- <filter-name>Upgrade Monitor</filter-name>
|
|
|
- <filter-class>com.kingdee.shr.base.syssetting.filter.UpgradeMonitorFilter</filter-class>
|
|
|
- <init-param>
|
|
|
- <!-- 升级url白名单,配置在里面的无需拦截-->
|
|
|
- <param-name>urlWhiteListed</param-name>
|
|
|
- <param-value>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
+ <filter>
|
|
|
+ <filter-name>Upgrade Monitor</filter-name>
|
|
|
+ <filter-class>com.kingdee.shr.base.syssetting.filter.UpgradeMonitorFilter</filter-class>
|
|
|
+ <init-param>
|
|
|
+ <!-- 升级url白名单,配置在里面的无需拦截-->
|
|
|
+ <param-name>urlWhiteListed</param-name>
|
|
|
+ <param-value>
|
|
|
/index.jsp,
|
|
|
/login.do,
|
|
|
/notUpgraded.jsp,
|
|
@@ -453,22 +485,22 @@
|
|
|
/web_frame/easrpc/frame.do,
|
|
|
/shr_loginout/logoutAndReleaseResource.do
|
|
|
</param-value>
|
|
|
- </init-param>
|
|
|
- <init-param>
|
|
|
- <!-- 升级uipk白名单,配置在里面的无需拦截-->
|
|
|
- <param-name>uipkWhiteListed</param-name>
|
|
|
- <param-value>
|
|
|
+ </init-param>
|
|
|
+ <init-param>
|
|
|
+ <!-- 升级uipk白名单,配置在里面的无需拦截-->
|
|
|
+ <param-name>uipkWhiteListed</param-name>
|
|
|
+ <param-value>
|
|
|
com.kingdee.eas.hr.mvdt.app.ControlDataMoveProject.form,
|
|
|
shr.org.AdminOrgUnitDataMove_list,
|
|
|
com.kingdee.eas.basedata.org.app.OrgUnitLayerType.F7,
|
|
|
shr.org.AdminOrgUnitDataMove_form,
|
|
|
com.kingdee.shr.shrimport.app.ImportTask.userList
|
|
|
</param-value>
|
|
|
- </init-param>
|
|
|
- <init-param>
|
|
|
- <!-- 升级handler白名单,配置在里面的无需拦截-->
|
|
|
- <param-name>handlerWhiteListed</param-name>
|
|
|
- <param-value>
|
|
|
+ </init-param>
|
|
|
+ <init-param>
|
|
|
+ <!-- 升级handler白名单,配置在里面的无需拦截-->
|
|
|
+ <param-name>handlerWhiteListed</param-name>
|
|
|
+ <param-value>
|
|
|
com.kingdee.eas.hr.mvdt.web.handler.ControlDataMoveProjectHandler,
|
|
|
com.kingdee.eas.hr.mvdt.web.handler.DataMoveProjectHandler,
|
|
|
com.kingdee.eas.hr.mvdt.web.handler.SHRMvTableListHandler,
|
|
@@ -481,33 +513,36 @@
|
|
|
com.kingdee.shr.hr.mvdt.handler.ControlCompensationDataMoveHandler,
|
|
|
com.kingdee.shr.base.syssetting.web.handler.LogJarClassInfoToolsHandler
|
|
|
</param-value>
|
|
|
- </init-param>
|
|
|
- </filter>
|
|
|
- <filter-mapping>
|
|
|
+ </init-param>
|
|
|
+ </filter>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>Upgrade Monitor</filter-name>
|
|
|
<url-pattern>*.action</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>Upgrade Monitor</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>Upgrade Monitor</filter-name>
|
|
|
<url-pattern>*.jsp</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>Upgrade Monitor</filter-name>
|
|
|
<url-pattern>*.html</url-pattern>
|
|
|
- </filter-mapping>
|
|
|
+ </filter-mapping>
|
|
|
+
|
|
|
<listener>
|
|
|
<listener-class>
|
|
|
org.springframework.web.context.ContextLoaderListener
|
|
|
</listener-class>
|
|
|
</listener>
|
|
|
- <!-- SSO 开始 -->
|
|
|
+
|
|
|
+ <!-- SSO 开始 -->
|
|
|
<listener>
|
|
|
<listener-class>com.kingdee.eas.cp.common.url.service.web.WebSessionListener</listener-class>
|
|
|
</listener>
|
|
|
+
|
|
|
<!-- <servlet>
|
|
|
<servlet-name>WfProcessImageServlet</servlet-name>
|
|
|
<servlet-class>com.kingdee.bos.workflow.designer.servlet.ProcessImageServlet</servlet-class>
|
|
@@ -540,14 +575,7 @@
|
|
|
com.kingdee.bos.waf.security.Logout
|
|
|
</servlet-class>
|
|
|
</servlet-->
|
|
|
- <servlet>
|
|
|
- <servlet-name>BuffaloServlet</servlet-name>
|
|
|
- <servlet-class>net.buffalo.web.servlet.ApplicationServlet</servlet-class>
|
|
|
- <init-param>
|
|
|
- <param-name>debug</param-name>
|
|
|
- <param-value>true</param-value>
|
|
|
- </init-param>
|
|
|
- </servlet>
|
|
|
+
|
|
|
<!-- webApi servlet-->
|
|
|
<servlet>
|
|
|
<servlet-name>OAToSHR</servlet-name>
|
|
@@ -558,11 +586,41 @@
|
|
|
<url-pattern>/api/oAToSHR</url-pattern>
|
|
|
</servlet-mapping>
|
|
|
|
|
|
+ <!-- webApi servlet-->
|
|
|
+ <servlet>
|
|
|
+ <servlet-name>OAToMbos</servlet-name>
|
|
|
+ <servlet-class>com.kingdee.eas.custom.sso.OAToMBos</servlet-class>
|
|
|
+ </servlet>
|
|
|
+ <servlet-mapping>
|
|
|
+ <servlet-name>OAToMbos</servlet-name>
|
|
|
+ <url-pattern>/api/oAToMBos</url-pattern>
|
|
|
+ </servlet-mapping>
|
|
|
+
|
|
|
+ <!-- BatchApprove servlet-->
|
|
|
+ <servlet>
|
|
|
+ <servlet-name>batchApprove</servlet-name>
|
|
|
+ <servlet-class>com.kingdee.eas.custom.sso.BatchApprove</servlet-class>
|
|
|
+ </servlet>
|
|
|
+ <servlet-mapping>
|
|
|
+ <servlet-name>batchApprove</servlet-name>
|
|
|
+ <url-pattern>/api/batchApprove</url-pattern>
|
|
|
+ </servlet-mapping>
|
|
|
+
|
|
|
+ <servlet>
|
|
|
+ <servlet-name>BuffaloServlet</servlet-name>
|
|
|
+ <servlet-class>net.buffalo.web.servlet.ApplicationServlet</servlet-class>
|
|
|
+ <init-param>
|
|
|
+ <param-name>debug</param-name>
|
|
|
+ <param-value>true</param-value>
|
|
|
+ </init-param>
|
|
|
+ </servlet>
|
|
|
|
|
|
+
|
|
|
<servlet-mapping>
|
|
|
<servlet-name>BuffaloServlet</servlet-name>
|
|
|
<url-pattern>/BUFFALO/*</url-pattern>
|
|
|
</servlet-mapping>
|
|
|
+
|
|
|
<!-- <servlet-mapping>
|
|
|
<servlet-name>WfProcessImageServlet</servlet-name>
|
|
|
<url-pattern>/processimage/*</url-pattern>
|
|
@@ -571,6 +629,7 @@
|
|
|
<servlet-name>FlexMessageBrokerServlet</servlet-name>
|
|
|
<url-pattern>/messagebroker/*</url-pattern>
|
|
|
</servlet-mapping> -->
|
|
|
+
|
|
|
<!--servlet-mapping>
|
|
|
<servlet-name>Faces Servlet</servlet-name>
|
|
|
<url-pattern>*.jsf</url-pattern>
|
|
@@ -583,10 +642,12 @@
|
|
|
<servlet-name>ResourceServlet</servlet-name>
|
|
|
<url-pattern>/_global/*</url-pattern>
|
|
|
</servlet-mapping-->
|
|
|
- <mime-mapping>
|
|
|
- <extension>mht</extension>
|
|
|
- <mime-type>message/rfc822</mime-type>
|
|
|
+
|
|
|
+ <mime-mapping>
|
|
|
+ <extension>mht</extension>
|
|
|
+ <mime-type>message/rfc822</mime-type>
|
|
|
</mime-mapping>
|
|
|
+
|
|
|
<!-- pack script -->
|
|
|
<servlet>
|
|
|
<description>This is the servlet needed for cache.type servlet, returns the packed resources</description>
|
|
@@ -594,22 +655,24 @@
|
|
|
<servlet-name>PackServlet</servlet-name>
|
|
|
<servlet-class>net.sf.packtag.servlet.PackServlet</servlet-class>
|
|
|
</servlet>
|
|
|
+
|
|
|
<servlet-mapping>
|
|
|
<servlet-name>PackServlet</servlet-name>
|
|
|
<url-pattern>styles/combined*.css</url-pattern>
|
|
|
- </servlet-mapping>
|
|
|
+ </servlet-mapping>
|
|
|
<servlet-mapping>
|
|
|
<servlet-name>PackServlet</servlet-name>
|
|
|
<url-pattern>combined*.js</url-pattern>
|
|
|
- </servlet-mapping>
|
|
|
+ </servlet-mapping>
|
|
|
<servlet-mapping>
|
|
|
<servlet-name>PackServlet</servlet-name>
|
|
|
<url-pattern>styles/external*.css</url-pattern>
|
|
|
- </servlet-mapping>
|
|
|
+ </servlet-mapping>
|
|
|
<servlet-mapping>
|
|
|
<servlet-name>PackServlet</servlet-name>
|
|
|
<url-pattern>external*.js</url-pattern>
|
|
|
</servlet-mapping>
|
|
|
+
|
|
|
<context-param>
|
|
|
<param-name>
|
|
|
com.kingdee.bos.webframework.SCRIPT_DEBUG
|
|
@@ -628,15 +691,17 @@
|
|
|
</param-name>
|
|
|
<param-value>L1,L2,L3</param-value>
|
|
|
</context-param>
|
|
|
- <!--context-param>
|
|
|
+
|
|
|
+ <!--context-param>
|
|
|
<param-name>webAppRootKey</param-name>
|
|
|
<param-value>easweb.root</param-value>
|
|
|
- </context-param-->
|
|
|
- <!--listener>
|
|
|
+ </context-param-->
|
|
|
+ <!--listener>
|
|
|
<listener-class>
|
|
|
org.springframework.web.util.WebAppRootListener
|
|
|
</listener-class>
|
|
|
</listener-->
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>WafHttpRequestFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.filter.ShrHttpRequestFilter</filter-class>
|
|
@@ -648,25 +713,27 @@
|
|
|
<param-name>RESPONSE_BUFFER_SIZE</param-name>
|
|
|
<param-value>5000</param-value>
|
|
|
</init-param>
|
|
|
- </filter>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS Authentication Filter</filter-name>
|
|
|
- <url-pattern>*.do</url-pattern>
|
|
|
+ </filter>
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS Authentication Filter</filter-name>
|
|
|
+ <url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
- <filter-mapping>
|
|
|
- <filter-name>CAS Validation Filter</filter-name>
|
|
|
- <url-pattern>*.do</url-pattern>
|
|
|
+ <filter-mapping>
|
|
|
+ <filter-name>CAS Validation Filter</filter-name>
|
|
|
+ <url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
<filter-mapping>
|
|
|
<filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<filter>
|
|
|
<filter-name>Waf2ContextFilter</filter-name>
|
|
|
<filter-class>
|
|
|
com.kingdee.shr.base.syssetting.filter.SHRContextFilter
|
|
|
</filter-class>
|
|
|
</filter>
|
|
|
+
|
|
|
<filter-mapping>
|
|
|
<filter-name>Waf2ContextFilter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
@@ -675,15 +742,17 @@
|
|
|
<filter-name>WafHttpRequestFilter</filter-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<!-- order: SHRRequestWorkPlatformFilter -->
|
|
|
<filter>
|
|
|
<filter-name>SHRRequestWorkPlatformFilter</filter-name>
|
|
|
<filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRRequestWorkPlatformFilter</filter-class>
|
|
|
</filter>
|
|
|
- <filter-mapping>
|
|
|
+ <filter-mapping>
|
|
|
<filter-name>SHRRequestWorkPlatformFilter</filter-name>
|
|
|
<url-pattern>*.html</url-pattern>
|
|
|
</filter-mapping>
|
|
|
+
|
|
|
<servlet>
|
|
|
<servlet-name>MVCServlet</servlet-name>
|
|
|
<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
|
|
@@ -697,25 +766,30 @@
|
|
|
<servlet-name>MVCServlet</servlet-name>
|
|
|
<url-pattern>*.do</url-pattern>
|
|
|
</servlet-mapping>
|
|
|
+
|
|
|
<!-- 500错误页面 -->
|
|
|
<error-page>
|
|
|
- <error-code>500</error-code>
|
|
|
- <location>/500.jsp</location>
|
|
|
- </error-page>
|
|
|
+ <error-code>500</error-code>
|
|
|
+ <location>/500.jsp</location>
|
|
|
+ </error-page>
|
|
|
+
|
|
|
<!-- 404错误页面 -->
|
|
|
<error-page>
|
|
|
- <error-code>404</error-code>
|
|
|
- <location>/404.jsp</location>
|
|
|
- </error-page>
|
|
|
+ <error-code>404</error-code>
|
|
|
+ <location>/404.jsp</location>
|
|
|
+ </error-page>
|
|
|
+
|
|
|
<listener>
|
|
|
<listener-class>com.kingdee.shr.base.syssetting.web.listener.SHRAppListener</listener-class>
|
|
|
</listener>
|
|
|
<listener>
|
|
|
<listener-class>com.kingdee.shr.base.syssetting.web.listener.SHRSessionListener</listener-class>
|
|
|
- </listener>
|
|
|
+ </listener>
|
|
|
+
|
|
|
<welcome-file-list>
|
|
|
<welcome-file>index.jsp</welcome-file>
|
|
|
</welcome-file-list>
|
|
|
+
|
|
|
<mime-mapping>
|
|
|
<extension>docx</extension>
|
|
|
<mime-type>application/vnd.openxmlformats-officedocument.wordprocessingml.document</mime-type>
|