web.xml 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4">
  3. <description>web</description>
  4. <display-name>web</display-name>
  5. <context-param>
  6. <param-name>contextConfigLocation</param-name>
  7. <param-value>/WEB-INF/sso/applicationContext-ssoClient.xml</param-value>
  8. </context-param>
  9. <context-param>
  10. <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
  11. <param-value>client</param-value>
  12. </context-param>
  13. <context-param>
  14. <param-name>facelets.SKIP_COMMENTS</param-name>
  15. <param-value>true</param-value>
  16. </context-param>
  17. <context-param>
  18. <param-name>
  19. org.operamasks.faces.IMPLICIT_NAVIGATION
  20. </param-name>
  21. <param-value>true</param-value>
  22. </context-param>
  23. <context-param>
  24. <param-name>
  25. org.operamasks.faces.COMPATIBLE_NOT_STRICT
  26. </param-name>
  27. <param-value>false</param-value>
  28. </context-param>
  29. <context-param>
  30. <param-name>org.operamasks.faces.SKIN</param-name>
  31. <param-value>waf</param-value>
  32. </context-param>
  33. <context-param>
  34. <param-name>javax.faces.DEFAULT_SUFFIX</param-name>
  35. <param-value>.xhtml</param-value>
  36. </context-param>
  37. <context-param>
  38. <param-name>
  39. org.operamasks.ATTRIBUTE_SETTING_CONFIG_FILE
  40. </param-name>
  41. <param-value>/WEB-INF/attributeSetting.properties</param-value>
  42. </context-param>
  43. <!--cas 3.0 client begin-->
  44. <context-param>
  45. <param-name>facelets.LIBRARIES</param-name>
  46. <param-value>/WEB-INF/taglib/waf.taglib.xml</param-value>
  47. </context-param>
  48. <!-- value: development, production -->
  49. <context-param>
  50. <param-name>productionMode</param-name>
  51. <param-value>production</param-value>
  52. </context-param>
  53. <!-- Light App login filter begin -->
  54. <filter>
  55. <filter-name>CAS Single Sign Out Filter</filter-name>
  56. <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
  57. </filter>
  58. <filter>
  59. <filter-name>encodingFilter</filter-name>
  60. <filter-class>
  61. org.springframework.web.filter.CharacterEncodingFilter
  62. </filter-class>
  63. <init-param>
  64. <param-name>encoding</param-name>
  65. <param-value>UTF-8</param-value>
  66. </init-param>
  67. <init-param>
  68. <param-name>forceEncoding</param-name>
  69. <param-value>true</param-value>
  70. </init-param>
  71. </filter>
  72. <filter-mapping>
  73. <filter-name>encodingFilter</filter-name>
  74. <url-pattern>*.do</url-pattern>
  75. </filter-mapping>
  76. <filter-mapping>
  77. <filter-name>encodingFilter</filter-name>
  78. <url-pattern>*.jsp</url-pattern>
  79. </filter-mapping>
  80. <!-- order:1 SHRRequestParamWrapFilter -->
  81. <filter>
  82. <filter-name>SHRRequestParamWrapFilter</filter-name>
  83. <filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRRequestParameterWrapFilter</filter-class>
  84. <init-param>
  85. <param-name>enableSHRRequestParamWrapFilter</param-name>
  86. <param-value>true</param-value>
  87. </init-param>
  88. </filter>
  89. <filter-mapping>
  90. <filter-name>SHRRequestParamWrapFilter</filter-name>
  91. <url-pattern>/*</url-pattern>
  92. </filter-mapping>
  93. <!-- order:2 XSSFilter -->
  94. <filter>
  95. <filter-name>XSSFilter</filter-name>
  96. <filter-class>com.kingdee.shr.base.syssetting.web.filter.XSSFilter</filter-class>
  97. <init-param>
  98. <!--request uipkWhiteList , if request uipk include uipkWhiteList,then ignore filter -->
  99. <param-name>uipkAndHandlerWhiteList</param-name>
  100. <param-value>
  101. com.kingdee.shr.base.syssetting.app.UIView.form,
  102. sourcecompare,
  103. com.kingdee.shr.base.syssetting.app.PrivacyAgreement.form,
  104. com.kingdee.shr.baseconfig.app.DocumentationConfig.form,
  105. com.kingdee.shr.base.syssetting.app.FieldRule.form
  106. </param-value>
  107. </init-param>
  108. </filter>
  109. <filter-mapping>
  110. <filter-name>XSSFilter</filter-name>
  111. <url-pattern>/*</url-pattern>
  112. </filter-mapping>
  113. <!-- order:3 SQLInjectionFilter -->
  114. <filter>
  115. <filter-name>SQLInjectionFilter</filter-name>
  116. <filter-class>com.kingdee.shr.base.syssetting.web.filter.SQLInjectionFilter</filter-class>
  117. <init-param>
  118. <param-name>enableSQLInjectionFilter</param-name>
  119. <!--enableSQLInjectionFilter default value is true,if need turn on,change value is : false -->
  120. <param-value>true</param-value>
  121. </init-param>
  122. <init-param>
  123. <!--request uipkWhiteList , if request uipk include uipkWhiteList,then ignore filter -->
  124. <param-name>uipkWhiteList</param-name>
  125. <param-value>
  126. com.kingdee.shr.dataplatform.app.CustomSQL.form,
  127. com.kingdee.shr.dataplatform.app.DataSetConfig.form,
  128. com.kingdee.shr.base.syssetting.app.UIView.form,
  129. com.kingdee.shr.base.syssetting.app.FieldRange.form,
  130. com.kingdee.shr.base.syssetting.app.ListFilterSolution.form,
  131. com.kingdee.shr.base.syssetting.app.ListSetSolution.form,
  132. shr.report.ReportDefGuidev2.0,
  133. com.kingdee.eas.rpts.ctrlsqldesign.app.KSQLReport.form,
  134. com.kingdee.shr.compensation.app.FormulaFunc.form,
  135. com.kingdee.shr.compensation.app.FormulaTmpTable.form
  136. </param-value>
  137. </init-param>
  138. <init-param>
  139. <!--sql key wrod , if request value include drop or delete .... ,then replace -->
  140. <param-name>sqlKeyWord</param-name>
  141. <param-value>drop,delete,truncate,update,insert,dbo.sysdatabases,
  142. dbo.sysdatabases--,information_schema.columns,table_schema,
  143. xp_cmdshell,group_concat,table_schema,declare,sitename,||,
  144. exec,execute,create,table,grant,use,column_name,union,*,master,;,-,+,//,/,%,#,all_tab_columns,ascii,substring</param-value>
  145. </init-param>
  146. <init-param>
  147. <!--verify parameter list, if request key include permItemId and value contains sql inject style ,then replace -->
  148. <param-name>sqlinjectfilterparams</param-name>
  149. <param-value>permItemId,personId,personID,relatedFieldId,serviceId,rootId,nodeId,billId,orgId,orgid,serviceName,uipk,sorterItems,parameters,sidx,sord,query,staffingId,staffId,uiClass,keyField,nd,objectID,proposerName,attendPeriodId,attendanceGroupID,proposerId,attendPolicyId,orgLongNum,bizManageTypeID,billIdParam,personid,positionId</param-value>
  150. </init-param>
  151. </filter>
  152. <filter-mapping>
  153. <filter-name>SQLInjectionFilter</filter-name>
  154. <url-pattern>/*</url-pattern>
  155. </filter-mapping>
  156. <!-- Light App login filter begin -->
  157. <filter>
  158. <filter-name>Light App Login Filter</filter-name>
  159. <filter-class>com.kingdee.shr.lightapp.filter.LightAppLoginFilter</filter-class>
  160. </filter>
  161. <filter-mapping>
  162. <filter-name>Light App Login Filter</filter-name>
  163. <url-pattern>/*</url-pattern>
  164. </filter-mapping>
  165. <!-- AppScanAttackFilter -->
  166. <filter>
  167. <filter-name>AppScanAttackFilter</filter-name>
  168. <filter-class>com.kingdee.shr.base.syssetting.web.filter.AppScanAttackFilter</filter-class>
  169. <init-param>
  170. <param-name>enableAppScanAttackFilter</param-name>
  171. <param-value>true</param-value>
  172. </init-param>
  173. </filter>
  174. <filter-mapping>
  175. <filter-name>AppScanAttackFilter</filter-name>
  176. <url-pattern>/*</url-pattern>
  177. </filter-mapping>
  178. <!-- order:4 DisableUrlSessionFilter -->
  179. <filter>
  180. <filter-name>DisableUrlSessionFilter</filter-name>
  181. <filter-class>com.kingdee.shr.base.syssetting.web.filter.DisableUrlSessionFilter</filter-class>
  182. <init-param>
  183. <param-name>excludePattern</param-name>
  184. <param-value>
  185. method=print+,method=import+,handler=com.kingdee.shr.base.syssetting.web.handler.ImportInfoHandler,uipk=com.kingdee.shr.report.app.ReportDef.list
  186. </param-value>
  187. </init-param>
  188. </filter>
  189. <filter-mapping>
  190. <filter-name>DisableUrlSessionFilter</filter-name>
  191. <url-pattern>*.do</url-pattern>
  192. </filter-mapping>
  193. <filter-mapping>
  194. <filter-name>DisableUrlSessionFilter</filter-name>
  195. <url-pattern>*.jsp</url-pattern>
  196. </filter-mapping>
  197. <filter>
  198. <filter-name>SHRAuthentiactionFilter</filter-name>
  199. <filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRAuthenticationFilter</filter-class>
  200. <init-param>
  201. <param-name>excludePattern</param-name>
  202. <param-value>
  203. </param-value>
  204. </init-param>
  205. </filter>
  206. <filter-mapping>
  207. <filter-name>SHRAuthentiactionFilter</filter-name>
  208. <url-pattern>*.do</url-pattern>
  209. </filter-mapping>
  210. <filter-mapping>
  211. <filter-name>SHRAuthentiactionFilter</filter-name>
  212. <url-pattern>*.jsp</url-pattern>
  213. </filter-mapping>
  214. <filter-mapping>
  215. <filter-name>SHRAuthentiactionFilter</filter-name>
  216. <url-pattern>*.html</url-pattern>
  217. </filter-mapping>
  218. <filter-mapping>
  219. <filter-name>SHRAuthentiactionFilter</filter-name>
  220. <url-pattern>*.htm</url-pattern>
  221. </filter-mapping>
  222. <filter>
  223. <filter-name>CAS Authentication Filter</filter-name>
  224. <filter-class>
  225. org.springframework.web.filter.DelegatingFilterProxy
  226. </filter-class>
  227. <init-param>
  228. <param-name>targetBeanName</param-name>
  229. <param-value>casAuthenticationFilter</param-value>
  230. </init-param>
  231. </filter>
  232. <filter-mapping>
  233. <filter-name>CAS Authentication Filter</filter-name>
  234. <url-pattern>/*</url-pattern>
  235. </filter-mapping>
  236. <filter>
  237. <filter-name>CAS Validation Filter</filter-name>
  238. <filter-class>
  239. org.springframework.web.filter.DelegatingFilterProxy
  240. </filter-class>
  241. <init-param>
  242. <param-name>targetBeanName</param-name>
  243. <param-value>casTicketValidationFilter</param-value>
  244. </init-param>
  245. </filter>
  246. <filter-mapping>
  247. <filter-name>CAS Validation Filter</filter-name>
  248. <url-pattern>/*</url-pattern>
  249. </filter-mapping>
  250. <filter>
  251. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  252. <filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
  253. </filter>
  254. <!--filter>
  255. <filter-name>WafFilter</filter-name>
  256. <filter-class>
  257. com.kingdee.bos.waf.intercepter.ExtensionFilter
  258. </filter-class>
  259. </filter-->
  260. <filter-mapping>
  261. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  262. <url-pattern>/*</url-pattern>
  263. </filter-mapping>
  264. <filter>
  265. <filter-name>ContextConstructorFilter</filter-name>
  266. <filter-class>com.kingdee.bos.sso.client.filter.ContextConstructorFilter</filter-class>
  267. </filter>
  268. <filter-mapping>
  269. <filter-name>ContextConstructorFilter</filter-name>
  270. <url-pattern>/*</url-pattern>
  271. </filter-mapping>
  272. <!-- SSO 结束 -->
  273. <!-- 暂时禁用性能监控filter
  274. <filter>
  275. <filter-name>PerfLog Filter</filter-name>
  276. <filter-class>com.kingdee.eas.perflog.app.monitor.http.HttpFilter</filter-class>
  277. </filter>
  278. <filter-mapping>
  279. <filter-name>PerfLog Filter</filter-name>
  280. <url-pattern>*</url-pattern>
  281. </filter-mapping>
  282. -->
  283. <!--filter-mapping>
  284. <filter-name>CAS Single Sign Out Filter</filter-name>
  285. <url-pattern>/*</url-pattern>
  286. </filter-mapping-->
  287. <filter-mapping>
  288. <filter-name>CAS Validation Filter</filter-name>
  289. <url-pattern>/wfdesigner/*</url-pattern>
  290. </filter-mapping>
  291. <filter-mapping>
  292. <filter-name>CAS Authentication Filter</filter-name>
  293. <url-pattern>/wfdesigner/*</url-pattern>
  294. </filter-mapping>
  295. <!-- <filter-mapping>
  296. <filter-name>WafFilter</filter-name>
  297. <url-pattern>/wfdesigner/*</url-pattern>
  298. </filter-mapping><filter-mapping>
  299. <filter-name>WafFilter</filter-name>
  300. <url-pattern>/messagebroker/*</url-pattern>
  301. </filter-mapping><filter-mapping>
  302. <filter-name>WafFilter</filter-name>
  303. <url-pattern>/processimage/*</url-pattern>
  304. </filter-mapping> -->
  305. <filter-mapping>
  306. <filter-name>CAS Authentication Filter</filter-name>
  307. <url-pattern>/servlet/BillServlet</url-pattern>
  308. </filter-mapping>
  309. <filter-mapping>
  310. <filter-name>CAS Authentication Filter</filter-name>
  311. <url-pattern>/servlet/ListServlet</url-pattern>
  312. </filter-mapping>
  313. <filter-mapping>
  314. <filter-name>CAS Validation Filter</filter-name>
  315. <url-pattern>/servlet/BillServlet</url-pattern>
  316. </filter-mapping>
  317. <filter-mapping>
  318. <filter-name>CAS Validation Filter</filter-name>
  319. <url-pattern>/servlet/ListServlet</url-pattern>
  320. </filter-mapping>
  321. <filter-mapping>
  322. <filter-name>CAS Authentication Filter</filter-name>
  323. <url-pattern>/wf-portal/*</url-pattern>
  324. </filter-mapping>
  325. <filter-mapping>
  326. <filter-name>CAS Validation Filter</filter-name>
  327. <url-pattern>/wf-portal/*</url-pattern>
  328. </filter-mapping>
  329. <filter-mapping>
  330. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  331. <url-pattern>/wf-portal/*</url-pattern>
  332. </filter-mapping>
  333. <filter-mapping>
  334. <filter-name>CAS Authentication Filter</filter-name>
  335. <url-pattern>/workflow/*</url-pattern>
  336. </filter-mapping>
  337. <filter-mapping>
  338. <filter-name>CAS Validation Filter</filter-name>
  339. <url-pattern>/workflow/*</url-pattern>
  340. </filter-mapping>
  341. <filter-mapping>
  342. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  343. <url-pattern>/workflow/*</url-pattern>
  344. </filter-mapping>
  345. <filter-mapping>
  346. <filter-name>CAS Authentication Filter</filter-name>
  347. <url-pattern>/billdigesttools/*.jsp</url-pattern>
  348. </filter-mapping>
  349. <filter-mapping>
  350. <filter-name>CAS Validation Filter</filter-name>
  351. <url-pattern>/billdigesttools/*.jsp</url-pattern>
  352. </filter-mapping>
  353. <filter-mapping>
  354. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  355. <url-pattern>/billdigesttools/*.jsp</url-pattern>
  356. </filter-mapping>
  357. <!--filter-mapping>
  358. <filter-name>WafFilter</filter-name>
  359. <url-pattern>*.jsp</url-pattern>
  360. </filter-mapping-->
  361. <!--cas 3.0 client end-->
  362. <filter>
  363. <filter-name>SHRWeb RPC Filter</filter-name>
  364. <filter-class>com.kingdee.shr.base.syssetting.filter.SHRWebRPCFilter</filter-class>
  365. </filter>
  366. <!--EASWeb RPC Filter-->
  367. <filter-mapping>
  368. <filter-name>SHRWeb RPC Filter</filter-name>
  369. <url-pattern>/*</url-pattern>
  370. </filter-mapping>
  371. <!-- <filter-mapping>
  372. <filter-name>WafFilter</filter-name>
  373. <url-pattern>*.jsf</url-pattern>
  374. </filter-mapping>
  375. <filter-mapping>
  376. <filter-name>WafFilter</filter-name>
  377. <url-pattern>/servlet/BillServlet</url-pattern>
  378. </filter-mapping>
  379. <filter-mapping>
  380. <filter-name>WafFilter</filter-name>
  381. <url-pattern>/servlet/BillEditServlet</url-pattern>
  382. </filter-mapping>
  383. <filter-mapping>
  384. <filter-name>WafFilter</filter-name>
  385. <url-pattern>/servlet/ListServlet</url-pattern>
  386. </filter-mapping>
  387. <filter-mapping>
  388. <filter-name>WafFilter</filter-name>
  389. <url-pattern>/servlet/BillListServlet</url-pattern>
  390. </filter-mapping> -->
  391. <filter>
  392. <filter-name>User Monitor</filter-name>
  393. <filter-class>com.kingdee.eas.hr.base.web.UserMonitorFilter</filter-class>
  394. </filter>
  395. <filter-mapping>
  396. <filter-name>User Monitor</filter-name>
  397. <url-pattern>*.action</url-pattern>
  398. </filter-mapping>
  399. <filter-mapping>
  400. <filter-name>User Monitor</filter-name>
  401. <url-pattern>*.do</url-pattern>
  402. </filter-mapping>
  403. <filter-mapping>
  404. <filter-name>User Monitor</filter-name>
  405. <url-pattern>*.jsp</url-pattern>
  406. </filter-mapping>
  407. <filter-mapping>
  408. <filter-name>User Monitor</filter-name>
  409. <url-pattern>*.html</url-pattern>
  410. </filter-mapping>
  411. <filter>
  412. <filter-name>HR context Filter</filter-name>
  413. <filter-class>com.kingdee.shr.base.filter.HRContextFilter</filter-class>
  414. </filter>
  415. <filter-mapping>
  416. <filter-name>HR context Filter</filter-name>
  417. <url-pattern>*.action</url-pattern>
  418. </filter-mapping>
  419. <filter-mapping>
  420. <filter-name>HR context Filter</filter-name>
  421. <url-pattern>*.do</url-pattern>
  422. </filter-mapping>
  423. <filter-mapping>
  424. <filter-name>HR context Filter</filter-name>
  425. <url-pattern>*.jsp</url-pattern>
  426. </filter-mapping>
  427. <filter-mapping>
  428. <filter-name>HR context Filter</filter-name>
  429. <url-pattern>*.html</url-pattern>
  430. </filter-mapping>
  431. <filter>
  432. <filter-name>Upgrade Monitor</filter-name>
  433. <filter-class>com.kingdee.shr.base.syssetting.filter.UpgradeMonitorFilter</filter-class>
  434. <init-param>
  435. <!-- 升级url白名单,配置在里面的无需拦截-->
  436. <param-name>urlWhiteListed</param-name>
  437. <param-value>
  438. /index.jsp,
  439. /login.do,
  440. /notUpgraded.jsp,
  441. /logout.jsp,
  442. /personSquarePhoto.do,
  443. /serviceMenu.do,
  444. /heartbeat.do,
  445. /shr/msf/service.do,
  446. /promptF7.do,
  447. /appData.do,
  448. /ces.jsp,
  449. /clubService/getUnReadNews.do,
  450. /web_frame/easrpc/login.do,
  451. /web_frame/easrpc/frame.do,
  452. /shr_loginout/logoutAndReleaseResource.do
  453. </param-value>
  454. </init-param>
  455. <init-param>
  456. <!-- 升级uipk白名单,配置在里面的无需拦截-->
  457. <param-name>uipkWhiteListed</param-name>
  458. <param-value>
  459. com.kingdee.eas.hr.mvdt.app.ControlDataMoveProject.form,
  460. shr.org.AdminOrgUnitDataMove_list,
  461. com.kingdee.eas.basedata.org.app.OrgUnitLayerType.F7,
  462. shr.org.AdminOrgUnitDataMove_form,
  463. com.kingdee.shr.shrimport.app.ImportTask.userList
  464. </param-value>
  465. </init-param>
  466. <init-param>
  467. <!-- 升级handler白名单,配置在里面的无需拦截-->
  468. <param-name>handlerWhiteListed</param-name>
  469. <param-value>
  470. com.kingdee.eas.hr.mvdt.web.handler.ControlDataMoveProjectHandler,
  471. com.kingdee.eas.hr.mvdt.web.handler.DataMoveProjectHandler,
  472. com.kingdee.eas.hr.mvdt.web.handler.SHRMvTableListHandler,
  473. com.kingdee.shr.base.syssetting.web.handler.ImportInfoHandler,
  474. com.kingdee.eas.hr.org.web.handler.OrgUnitListHandler,
  475. com.kingdee.eas.hr.org.web.handler.OrgUnitLayerTypeF7Handler,
  476. com.kingdee.shr.hr.mvdt.handler.ControlAdminDataMoveHandler,
  477. com.kingdee.eas.hr.org.web.handler.OrgUnitEditHandler,
  478. com.kingdee.shr.base.syssetting.web.handler.SystemConfigSolutionHandler,
  479. com.kingdee.shr.hr.mvdt.handler.ControlCompensationDataMoveHandler,
  480. com.kingdee.shr.base.syssetting.web.handler.LogJarClassInfoToolsHandler
  481. </param-value>
  482. </init-param>
  483. </filter>
  484. <filter-mapping>
  485. <filter-name>Upgrade Monitor</filter-name>
  486. <url-pattern>*.action</url-pattern>
  487. </filter-mapping>
  488. <filter-mapping>
  489. <filter-name>Upgrade Monitor</filter-name>
  490. <url-pattern>*.do</url-pattern>
  491. </filter-mapping>
  492. <filter-mapping>
  493. <filter-name>Upgrade Monitor</filter-name>
  494. <url-pattern>*.jsp</url-pattern>
  495. </filter-mapping>
  496. <filter-mapping>
  497. <filter-name>Upgrade Monitor</filter-name>
  498. <url-pattern>*.html</url-pattern>
  499. </filter-mapping>
  500. <listener>
  501. <listener-class>
  502. org.springframework.web.context.ContextLoaderListener
  503. </listener-class>
  504. </listener>
  505. <!-- SSO 开始 -->
  506. <listener>
  507. <listener-class>com.kingdee.eas.cp.common.url.service.web.WebSessionListener</listener-class>
  508. </listener>
  509. <!-- <servlet>
  510. <servlet-name>WfProcessImageServlet</servlet-name>
  511. <servlet-class>com.kingdee.bos.workflow.designer.servlet.ProcessImageServlet</servlet-class>
  512. <load-on-startup>2</load-on-startup>
  513. </servlet> -->
  514. <!--servlet>
  515. <servlet-name>FlexMessageBrokerServlet</servlet-name>
  516. <servlet-class>flex.messaging.MessageBrokerServlet</servlet-class>
  517. <init-param>
  518. <param-name>services.configuration.file</param-name>
  519. <param-value>/WEB-INF/flex/services-config.xml</param-value>
  520. </init-param>
  521. <load-on-startup>1</load-on-startup>
  522. </servlet-->
  523. <!--servlet>
  524. <servlet-name>Faces Servlet</servlet-name>
  525. <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
  526. <load-on-startup>1</load-on-startup>
  527. </servlet-->
  528. <!--servlet>
  529. <servlet-name>ResourceServlet</servlet-name>
  530. <servlet-class>
  531. com.kingdee.bos.web.resource.ResourceServlet
  532. </servlet-class>
  533. <load-on-startup>10</load-on-startup>
  534. </servlet-->
  535. <!--servlet>
  536. <servlet-name>Logout Servlet</servlet-name>
  537. <servlet-class>
  538. com.kingdee.bos.waf.security.Logout
  539. </servlet-class>
  540. </servlet-->
  541. <servlet>
  542. <servlet-name>BuffaloServlet</servlet-name>
  543. <servlet-class>net.buffalo.web.servlet.ApplicationServlet</servlet-class>
  544. <init-param>
  545. <param-name>debug</param-name>
  546. <param-value>true</param-value>
  547. </init-param>
  548. </servlet>
  549. <!-- webApi servlet-->
  550. <servlet>
  551. <servlet-name>OAToSHR</servlet-name>
  552. <servlet-class>com.kingdee.eas.custom.sso.OAToSHR</servlet-class>
  553. </servlet>
  554. <servlet-mapping>
  555. <servlet-name>OAToSHR</servlet-name>
  556. <url-pattern>/api/oAToSHR</url-pattern>
  557. </servlet-mapping>
  558. <servlet-mapping>
  559. <servlet-name>BuffaloServlet</servlet-name>
  560. <url-pattern>/BUFFALO/*</url-pattern>
  561. </servlet-mapping>
  562. <!-- <servlet-mapping>
  563. <servlet-name>WfProcessImageServlet</servlet-name>
  564. <url-pattern>/processimage/*</url-pattern>
  565. </servlet-mapping> -->
  566. <!-- <servlet-mapping>
  567. <servlet-name>FlexMessageBrokerServlet</servlet-name>
  568. <url-pattern>/messagebroker/*</url-pattern>
  569. </servlet-mapping> -->
  570. <!--servlet-mapping>
  571. <servlet-name>Faces Servlet</servlet-name>
  572. <url-pattern>*.jsf</url-pattern>
  573. </servlet-mapping-->
  574. <servlet-mapping>
  575. <servlet-name>Logout Servlet</servlet-name>
  576. <url-pattern>/logout</url-pattern>
  577. </servlet-mapping>
  578. <!--servlet-mapping>
  579. <servlet-name>ResourceServlet</servlet-name>
  580. <url-pattern>/_global/*</url-pattern>
  581. </servlet-mapping-->
  582. <mime-mapping>
  583. <extension>mht</extension>
  584. <mime-type>message/rfc822</mime-type>
  585. </mime-mapping>
  586. <!-- pack script -->
  587. <servlet>
  588. <description>This is the servlet needed for cache.type servlet, returns the packed resources</description>
  589. <display-name>PackServlet</display-name>
  590. <servlet-name>PackServlet</servlet-name>
  591. <servlet-class>net.sf.packtag.servlet.PackServlet</servlet-class>
  592. </servlet>
  593. <servlet-mapping>
  594. <servlet-name>PackServlet</servlet-name>
  595. <url-pattern>styles/combined*.css</url-pattern>
  596. </servlet-mapping>
  597. <servlet-mapping>
  598. <servlet-name>PackServlet</servlet-name>
  599. <url-pattern>combined*.js</url-pattern>
  600. </servlet-mapping>
  601. <servlet-mapping>
  602. <servlet-name>PackServlet</servlet-name>
  603. <url-pattern>styles/external*.css</url-pattern>
  604. </servlet-mapping>
  605. <servlet-mapping>
  606. <servlet-name>PackServlet</servlet-name>
  607. <url-pattern>external*.js</url-pattern>
  608. </servlet-mapping>
  609. <context-param>
  610. <param-name>
  611. com.kingdee.bos.webframework.SCRIPT_DEBUG
  612. </param-name>
  613. <param-value>false</param-value>
  614. </context-param>
  615. <context-param>
  616. <param-name>
  617. com.kingdee.bos.webframework.SUPPORT_MULTILANG
  618. </param-name>
  619. <param-value>false</param-value>
  620. </context-param>
  621. <context-param>
  622. <param-name>
  623. com.kingdee.bos.webframework.LANGS
  624. </param-name>
  625. <param-value>L1,L2,L3</param-value>
  626. </context-param>
  627. <!--context-param>
  628. <param-name>webAppRootKey</param-name>
  629. <param-value>easweb.root</param-value>
  630. </context-param-->
  631. <!--listener>
  632. <listener-class>
  633. org.springframework.web.util.WebAppRootListener
  634. </listener-class>
  635. </listener-->
  636. <filter>
  637. <filter-name>WafHttpRequestFilter</filter-name>
  638. <filter-class>com.kingdee.shr.base.syssetting.filter.ShrHttpRequestFilter</filter-class>
  639. <init-param>
  640. <param-name>CONVERSATION_SUPPORT</param-name>
  641. <param-value>true</param-value>
  642. </init-param>
  643. <init-param>
  644. <param-name>RESPONSE_BUFFER_SIZE</param-name>
  645. <param-value>5000</param-value>
  646. </init-param>
  647. </filter>
  648. <filter-mapping>
  649. <filter-name>CAS Authentication Filter</filter-name>
  650. <url-pattern>*.do</url-pattern>
  651. </filter-mapping>
  652. <filter-mapping>
  653. <filter-name>CAS Validation Filter</filter-name>
  654. <url-pattern>*.do</url-pattern>
  655. </filter-mapping>
  656. <filter-mapping>
  657. <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
  658. <url-pattern>*.do</url-pattern>
  659. </filter-mapping>
  660. <filter>
  661. <filter-name>Waf2ContextFilter</filter-name>
  662. <filter-class>
  663. com.kingdee.shr.base.syssetting.filter.SHRContextFilter
  664. </filter-class>
  665. </filter>
  666. <filter-mapping>
  667. <filter-name>Waf2ContextFilter</filter-name>
  668. <url-pattern>*.do</url-pattern>
  669. </filter-mapping>
  670. <filter-mapping>
  671. <filter-name>WafHttpRequestFilter</filter-name>
  672. <url-pattern>*.do</url-pattern>
  673. </filter-mapping>
  674. <!-- order: SHRRequestWorkPlatformFilter -->
  675. <filter>
  676. <filter-name>SHRRequestWorkPlatformFilter</filter-name>
  677. <filter-class>com.kingdee.shr.base.syssetting.web.filter.SHRRequestWorkPlatformFilter</filter-class>
  678. </filter>
  679. <filter-mapping>
  680. <filter-name>SHRRequestWorkPlatformFilter</filter-name>
  681. <url-pattern>*.html</url-pattern>
  682. </filter-mapping>
  683. <servlet>
  684. <servlet-name>MVCServlet</servlet-name>
  685. <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
  686. <init-param>
  687. <param-name>contextConfigLocation</param-name>
  688. <param-value>/WEB-INF/properties/applicationContext.xml</param-value>
  689. </init-param>
  690. <load-on-startup>1</load-on-startup>
  691. </servlet>
  692. <servlet-mapping>
  693. <servlet-name>MVCServlet</servlet-name>
  694. <url-pattern>*.do</url-pattern>
  695. </servlet-mapping>
  696. <!-- 500错误页面 -->
  697. <error-page>
  698. <error-code>500</error-code>
  699. <location>/500.jsp</location>
  700. </error-page>
  701. <!-- 404错误页面 -->
  702. <error-page>
  703. <error-code>404</error-code>
  704. <location>/404.jsp</location>
  705. </error-page>
  706. <listener>
  707. <listener-class>com.kingdee.shr.base.syssetting.web.listener.SHRAppListener</listener-class>
  708. </listener>
  709. <listener>
  710. <listener-class>com.kingdee.shr.base.syssetting.web.listener.SHRSessionListener</listener-class>
  711. </listener>
  712. <welcome-file-list>
  713. <welcome-file>index.jsp</welcome-file>
  714. </welcome-file-list>
  715. <mime-mapping>
  716. <extension>docx</extension>
  717. <mime-type>application/vnd.openxmlformats-officedocument.wordprocessingml.document</mime-type>
  718. </mime-mapping>
  719. <mime-mapping>
  720. <extension>xlsx</extension>
  721. <mime-type>application/vnd.openxmlformats-officedocument.spreadsheetml.sheet</mime-type>
  722. </mime-mapping>
  723. <mime-mapping>
  724. <extension>pptx</extension>
  725. <mime-type>application/vnd.openxmlformats-officedocument.presentationml.presentation</mime-type>
  726. </mime-mapping>
  727. </web-app>