Restore all security filters

James Moger

2014-06-12 52daaea33dab5d10ec7bd7164a4ce6560c56c8d4

 src/main/java/com/gitblit/guice/WebModule.java

@@ -20,18 +20,24 @@

import com.gitblit.Constants;
import com.gitblit.servlet.BranchGraphServlet;
import com.gitblit.servlet.DownloadZipFilter;
import com.gitblit.servlet.DownloadZipServlet;
import com.gitblit.servlet.EnforceAuthenticationFilter;
import com.gitblit.servlet.FederationServlet;
import com.gitblit.servlet.GitFilter;
import com.gitblit.servlet.GitServlet;
import com.gitblit.servlet.LogoServlet;
import com.gitblit.servlet.PagesFilter;
import com.gitblit.servlet.PagesServlet;
import com.gitblit.servlet.ProxyFilter;
import com.gitblit.servlet.PtServlet;
import com.gitblit.servlet.RawFilter;
import com.gitblit.servlet.RawServlet;
import com.gitblit.servlet.RobotsTxtServlet;
import com.gitblit.servlet.RpcFilter;
import com.gitblit.servlet.RpcServlet;
import com.gitblit.servlet.SparkleShareInviteServlet;
import com.gitblit.servlet.SyndicationFilter;
import com.gitblit.servlet.SyndicationServlet;
import com.gitblit.wicket.GitblitWicketFilter;
import com.google.common.base.Joiner;
@@ -69,12 +75,12 @@
      filter(ALL).through(EnforceAuthenticationFilter.class);

      // security filters
//      filter(fuzzy(Constants.R_PATH), fuzzy(Constants.GIT_PATH)).through(GitFilter.class);
//      filter(fuzzy(Constants.RAW_PATH)).through(RawFilter.class);
//      filter(fuzzy(Constants.PAGES)).through(PagesFilter.class);
//      filter(fuzzy(Constants.RPC_PATH)).through(RpcFilter.class);
//      filter(fuzzy(Constants.ZIP_PATH)).through(DownloadZipFilter.class);
//      filter(fuzzy(Constants.SYNDICATION_PATH)).through(SyndicationFilter.class);
      filter(fuzzy(Constants.R_PATH), fuzzy(Constants.GIT_PATH)).through(GitFilter.class);
      filter(fuzzy(Constants.RAW_PATH)).through(RawFilter.class);
      filter(fuzzy(Constants.PAGES)).through(PagesFilter.class);
      filter(fuzzy(Constants.RPC_PATH)).through(RpcFilter.class);
      filter(fuzzy(Constants.ZIP_PATH)).through(DownloadZipFilter.class);
      filter(fuzzy(Constants.SYNDICATION_PATH)).through(SyndicationFilter.class);

      // Wicket
      String toIgnore = Joiner.on(",").join(Constants.R_PATH, Constants.GIT_PATH, Constants.RAW_PATH,