严重的安全限制,而tomcat 8启动与liferay

时间:2015-09-03 14:47:09

标签: security tomcat liferay liferay-6 tomcat8

当tomcat 8出现liferay时,我收到以下严重消息。

SEVERE [localhost-startStop-1] org.apache.tomcat.util.descriptor.web.SecurityConstraint.findUncoveredHttpMethods For security constraints with URL pattern [/bg/c/portal/protected] only the HTTP methods [POST GET] are covered. All other methods are uncovered.
03-Sep-2015 07:06:00.733 SEVERE [localhost-startStop-1] org.apache.tomcat.util.descriptor.web.SecurityConstraint.findUncoveredHttpMethods For security constraints with URL pattern [/sv/c/portal/protected] only the HTTP methods [POST GET] are covered. All other methods are uncovered.
03-Sep-2015 07:06:00.733 SEVERE [localhost-startStop-1] org.apache.tomcat.util.descriptor.web.SecurityConstraint.findUncoveredHttpMethods For security constraints with URL pattern [/zh/c/portal/protected] only the HTTP methods [POST GET] are covered. All other methods are uncovered.

这对服务器启动没有任何影响,但不确定是什么原因引起的?任何帮助都会非常感激。

1 个答案:

答案 0 :(得分:16)

这意味着在self.navigationController.navigationBar.tintColor = [UIColor greenColor]; 中有人为模式web.xml上的方法POST和GET指定了安全约束,可能与此类似:

/bg/c/portal/protected

您应该删除<security-constraint> <web-resource-collection> <url-pattern>/bg/c/portal/protected</url-pattern> <http-method>POST</http-method> <http-method>GET</http-method> </web-resource-collection> <user-data-constraint> <transport-guarantee>...</transport-guarantee> </user-data-constraint> </security-constraint> 括号,以便它匹配此http-method的所有方法,或者如果您想在其上设置不同的url-pattern括号,则创建第二个。{

例如,如果您希望使用http-method/bg/c/portal/protected方法的SSL POST端点保护,但对于其他您不需要的方法,那么您应该创建一个这样的配置:

GET

如您所见,此模式的所有方法都已涵盖,因此不会抛出任何错误。