FACES-2178 added <security-constraint> to Bridge TCK

liferay · May 18, 2015 · 8405c66 · 8405c66
1 parent c4dd26c
commit 8405c66
Show file tree

Hide file tree

Showing 20 changed files with 300 additions and 10 deletions.
diff --git a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,4 +75,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
diff --git a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,4 +60,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml
@@ -205,6 +205,20 @@
   	<url-pattern>/tests/*</url-pattern>
   </servlet-mapping>
   <!-- END: LIFERAY PORTAL -->
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml
@@ -153,6 +153,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>