rubyfox-server 2.17.3.1 → 2.19.2.0

data/lib/rubyfox/server/data/www/manager/META-INF/context.xml

@@ -16,6 +16,8 @@
   limitations under the License.
 -->
 <Context antiResourceLocking="false" privileged="true" >
+  <CookieProcessor className="org.apache.tomcat.util.http.Rfc6265CookieProcessor"
+                   sameSiteCookies="strict" />
   <!--
   <Valve className="org.apache.catalina.valves.RemoteAddrValve"
          allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />

data/lib/rubyfox/server/data/www/manager/WEB-INF/jsp/connectorCerts.jsp

@@ -32,7 +32,7 @@
     <meta http-equiv="cache-control" content="no-cache,must-revalidate"/><!-- HTTP 1.1 -->
     <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' -->
     <meta http-equiv="content-language" content="en"/>
-    <meta name="copyright" content="copyright 2005-2019 the Apache Software Foundation"/>
+    <meta name="copyright" content="copyright 2005-2021 the Apache Software Foundation"/>
     <meta name="robots" content="noindex,nofollow,noarchive"/>
     <title>Configured certificate chains per Connector</title>
 </head>

data/lib/rubyfox/server/data/www/manager/WEB-INF/jsp/connectorCiphers.jsp

@@ -32,7 +32,7 @@
     <meta http-equiv="cache-control" content="no-cache,must-revalidate"/><!-- HTTP 1.1 -->
     <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' -->
     <meta http-equiv="content-language" content="en"/>
-    <meta name="copyright" content="copyright 2005-2019 the Apache Software Foundation"/>
+    <meta name="copyright" content="copyright 2005-2021 the Apache Software Foundation"/>
     <meta name="robots" content="noindex,nofollow,noarchive"/>
     <title>Configured ciphers per Connector</title>
 </head>

data/lib/rubyfox/server/data/www/manager/WEB-INF/jsp/connectorTrustedCerts.jsp

@@ -32,7 +32,7 @@
     <meta http-equiv="cache-control" content="no-cache,must-revalidate"/><!-- HTTP 1.1 -->
     <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' -->
     <meta http-equiv="content-language" content="en"/>
-    <meta name="copyright" content="copyright 2005-2019 the Apache Software Foundation"/>
+    <meta name="copyright" content="copyright 2005-2021 the Apache Software Foundation"/>
     <meta name="robots" content="noindex,nofollow,noarchive"/>
     <title>Trusted certificates per Connector</title>
 </head>

data/lib/rubyfox/server/data/www/manager/WEB-INF/jsp/sessionDetail.jsp

@@ -51,7 +51,7 @@
     <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' -->
     <meta http-equiv="content-language" content="en"/>
     <meta name="author" content="Cedrik LIME"/>
-    <meta name="copyright" content="copyright 2005-2019 the Apache Software Foundation"/>
+    <meta name="copyright" content="copyright 2005-2021 the Apache Software Foundation"/>
     <meta name="robots" content="noindex,nofollow,noarchive"/>
     <title>Sessions Administration: details for <%= currentSessionId %></title>
 </head>
@@ -119,7 +119,7 @@
 
    <table style="text-align: left;" border="1" cellpadding="2" cellspacing="2">
    <% int nAttributes = 0;
-      Enumeration attributeNamesEnumeration = currentHttpSession.getAttributeNames();
+      Enumeration<String> attributeNamesEnumeration = currentHttpSession.getAttributeNames();
       while (attributeNamesEnumeration.hasMoreElements()) {
           attributeNamesEnumeration.nextElement();
           ++nAttributes;
@@ -143,7 +143,7 @@
        <tbody>
    <% attributeNamesEnumeration = currentHttpSession.getAttributeNames();
       while (attributeNamesEnumeration.hasMoreElements()) {
-          String attributeName = (String) attributeNamesEnumeration.nextElement();
+          String attributeName = attributeNamesEnumeration.nextElement();
    %>
            <tr>
                <td align="center">

data/lib/rubyfox/server/data/www/manager/WEB-INF/jsp/sessionsList.jsp

@@ -42,7 +42,7 @@
     <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' -->
     <meta http-equiv="content-language" content="en"/>
     <meta name="author" content="Cedrik LIME"/>
-    <meta name="copyright" content="copyright 2005-2019 the Apache Software Foundation"/>
+    <meta name="copyright" content="copyright 2005-2021 the Apache Software Foundation"/>
     <meta name="robots" content="noindex,nofollow,noarchive"/>
     <title>Sessions Administration for <%= JspHelper.escapeXml(cn.getDisplayName()) %></title>
 </head>

data/lib/rubyfox/server/data/www/manager/WEB-INF/web.xml

@@ -100,11 +100,28 @@
     </init-param>
   </filter>
 
+  <!-- Configured to set X-FRAME-OPTIONS. Disable HSTS in case it interferes -->
+  <!-- with an existing setting. Keep X-Content-Type-Options and             -->
+  <!-- X-XSS-Protection as they are page specific.                           -->
+  <filter>
+    <filter-name>HTTP header security filter</filter-name>
+    <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
+    <init-param>
+      <param-name>hstsEnabled</param-name>
+      <param-value>false</param-value>
+    </init-param>
+  </filter>
+
   <filter-mapping>
     <filter-name>CSRF</filter-name>
     <servlet-name>HTMLManager</servlet-name>
   </filter-mapping>
 
+  <filter-mapping>
+    <filter-name>HTTP header security filter</filter-name>
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
+
   <!-- Define a Security Constraint on this Application -->
   <!-- NOTE:  None of these roles are present in the default users file -->
   <security-constraint>

data/lib/rubyfox/server/data/www/manager/css/manager.css

@@ -0,0 +1,141 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements.  See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License.  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+body {
+    font-family: Tahoma, Arial, sans-serif;
+}
+
+h1,
+h2,
+h3,
+b {
+    color           : white;
+    background-color: #525D76;
+}
+
+h1 {
+    font-size: 22px;
+}
+
+h2 {
+    font-size: 16px;
+}
+
+h3 {
+    font-size: 14px;
+}
+
+p {
+    font-size: 12px;
+}
+
+a {
+    color: black;
+}
+
+.line {
+    height          : 1px;
+    background-color: #525D76;
+    border          : none;
+}
+
+table {
+    width: 100%;
+}
+
+td.page-title {
+    text-align    : center;
+    vertical-align: top;
+    font-family   : sans-serif, Tahoma, Arial;
+    font-weight   : bold;
+    background    : white;
+    color         : black;
+}
+
+td.title {
+    text-align    : left;
+    vertical-align: top;
+    font-family   : sans-serif, Tahoma, Arial;
+    font-style    : italic;
+    font-weight   : bold;
+    background    : #D2A41C;
+}
+
+td.header-left {
+    text-align    : left;
+    vertical-align: top;
+    font-family   : sans-serif, Tahoma, Arial;
+    font-weight   : bold;
+    background    : #FFDC75;
+}
+
+td.header-center {
+    text-align    : center;
+    vertical-align: top;
+    font-family   : sans-serif, Tahoma, Arial;
+    font-weight   : bold;
+    background    : #FFDC75;
+}
+
+td.row-left {
+    text-align    : left;
+    vertical-align: middle;
+    font-family   : sans-serif, Tahoma, Arial;
+    color         : black;
+}
+
+td.row-center {
+    text-align    : center;
+    vertical-align: middle;
+    font-family   : sans-serif, Tahoma, Arial;
+    color         : black;
+}
+
+td.row-right {
+    text-align    : right;
+    vertical-align: middle;
+    font-family   : sans-serif, Tahoma, Arial;
+    color         : black;
+}
+
+TH {
+    text-align    : center;
+    vertical-align: top;
+    font-family   : sans-serif, Tahoma, Arial;
+    font-weight   : bold;
+    background    : #FFDC75;
+}
+
+TD {
+    text-align    : center;
+    vertical-align: middle;
+    font-family   : sans-serif, Tahoma, Arial;
+    color         : black;
+}
+
+form {
+    margin: 1;
+}
+
+form.inline {
+    display: inline;
+}
+
+img.tomcat-logo {
+    height: 92px;
+    float : left;
+}