セキュリティ上の理由から。サーバーの詳細を誰にも見せたくありません。
http://:/MyServices/axis2-web/HappyAxis.jsp
上記のリンクをクリックすると、サーバー関連の詳細が表示されます。
axis2 Web サービスから HappyAxis.jsp ページを無効にする方法は?
2715 次
1 に答える
1
2 つの変更を行う必要があります。
1) WAR ファイル / Web アプリケーション内の index.jsp ファイルから次のコードを削除します。
<li><a href="axis2-web/HappyAxis.jsp">Validate</a>
<br/>
Check the system to see whether all the required libraries are in place
and view the system information. </li>
フォルダー --> WebContent\axis2-web\index.jsp / Warfile\axis2-web\index.jsp
変更された index.jsp コード
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
<jsp:include page="include/httpbase.jsp"/>
<title>Axis 2 - Home</title>
<link href="axis2-web/css/axis-style.css" rel="stylesheet" type="text/css"/>
</head>
<body>
<jsp:include page="include/header.inc" />
<br/>
<h1>Welcome!</h1>
Welcome to the new generation of Axis. If you can see this page you have
successfully deployed the Axis2 Web Application. However, to ensure that Axis2
is properly working, we encourage you to click on the validate link.
<br/>
<ul>
<li><a href="services/listServices">Services</a>
<br/>
View the list of all the available services deployed in this server.
</li>
<%--<li><a href="interop.jsp">Do an interop test</a>
<br/>
You can run Interoperability tests here
</li>--%>
<li><a href="axis2-admin/">Administration</a>
<br/>
Console for administering this Axis2 installation.
</li>
</ul>
<jsp:include page="include/footer.inc"/>
</body>
</html>
2) HappyAxis.jsp の名前を新しい名前 (ServerDetails.jsp など) に変更し、LeftFrame.jsp を変更して、新しく作成された ServerDetails.jsp を表示します。こうすることで、ログインしたときだけ HappyAxis.jsp / ServerDetails.jsp のリンクを見ることができます。
<tr>
<td colspan="2" >
<b>Happy Axis</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-web/ServerDetails.jsp">Validate</a>
</td>
</tr>
修正済みの LeftFrame.jsp を完成させる
<%--
~ Licensed to the Apache Software Foundation (ASF) under one
~ or more contributor license agreements. See the NOTICE file
~ distributed with this work for additional information
~ regarding copyright ownership. The ASF licenses this file
~ to you under the Apache License, Version 2.0 (the
~ "License"); you may not use this file except in compliance
~ with the License. You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing,
~ software distributed under the License is distributed on an
~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
~ KIND, either express or implied. See the License for the
~ specific language governing permissions and limitations
~ under the License.
--%>
<%@ page import="org.apache.axis2.Constants" %>
<%@ page import="org.apache.axis2.context.ConfigurationContext" %>
<%@ page import="org.apache.axis2.context.ServiceContext" %>
<%@ page import="org.apache.axis2.context.ServiceGroupContext" %>
<%@ page import="org.apache.axis2.deployment.util.PhasesInfo" %>
<%@ page import="org.apache.axis2.description.AxisModule" %>
<%@ page import="org.apache.axis2.description.AxisOperation" %>
<%@ page import="org.apache.axis2.description.AxisService" %>
<%@ page import="org.apache.axis2.description.AxisServiceGroup" %>
<%@ page import="org.apache.axis2.description.Parameter" %>
<%@ page import="org.apache.axis2.engine.AxisConfiguration" %>
<%@ page import="org.apache.axis2.engine.Handler" %>
<%@ page import="org.apache.axis2.engine.Phase" %>
<%@ page import="org.apache.axis2.util.JavaUtils" %>
<%@ page import="java.util.ArrayList" %>
<%@ page import="java.util.Collection" %>
<%@ page import="java.util.Enumeration" %>
<%@ page import="java.util.HashMap" %>
<%@ page import="java.util.Hashtable" %>
<%@ page import="java.util.Iterator" %>
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<table width="100%" style="border-right:1px solid #CCCCCC;">
<tr>
<td colspan="2" >
<b>Tools </b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/upload">Upload Service</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b><nobr>System Components </nobr></b>
</td>
</tr>
<tr>
<td>
</td>
<td >
<a href="axis2-admin/listService">Available Services</a>
</td>
</tr>
<tr>
<td>
</td>
<td >
<a href="axis2-admin/listServiceGroups">Available Service Groups</a>
</td>
</tr>
<tr>
<td>
</td>
<td >
<a href="axis2-admin/listModules">Available Modules</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/globalModules">Globally Engaged Modules</a>
</td>
</tr>
<tr>
<td>
</td>
<td >
<a href="axis2-admin/listPhases">Available Phases</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b>Execution Chains</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/viewGlobalHandlers">Global Chains</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/selectService">Operation Specific Chains</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b>Engage Module</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/engagingglobally">For all Services</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/engageToServiceGroup">For a Service Group</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/engageToService">For a Service</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/listOperation">For an Operation</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b>Services</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/deactivateService">Deactivate Service</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/activateService">Activate Service</a>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/selectServiceParaEdit">Edit Parameters</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b>Contexts</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-admin/listContexts">View Hierarchy</a>
</td>
</tr>
<tr>
<td colspan="2" >
<b>Happy Axis</b>
</td>
</tr>
<tr>
<td>
</td>
<td>
<a href="axis2-web/ServerDetails.jsp">Validate</a>
</td>
</tr>
</table>
また、ユーザーがパスを知っていれば、新しい jsp ServerDetails.jsp にアクセスできます。さらに安全が必要な場合は、Happy axis jsp を削除して index.jsp から参照を削除するか、AdminServlet を変更して、この JSP org.apache.axis2.transport.http.AxisAdminServlet のセキュリティ検証を追加します。
于 2014-06-25T12:09:24.480 に答える