Tomcat 配置 Http自动跳转至Https

最新推荐文章于 2023-09-24 14:46:13 发布

独自等待_T

最新推荐文章于 2023-09-24 14:46:13 发布

阅读量600

点赞数

CC 4.0 BY-SA版权

分类专栏： JAVA web 开发 Tomcat 文章标签： tomcat

本文链接：https://blog.csdn.net/smilevt/article/details/117419138

JAVA web 开发同时被 2 个专栏收录

10 篇文章

订阅专栏

Tomcat

1 篇文章

订阅专栏

修改tomcat中conf文件夹下的web.xml，添加如下内容：

<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<init-param>
<param-name>antiClickJackingOption</param-name>
<param-value>SAMEORIGIN</param-value>
</init-param>
<async-supported>true</async-supported>
</filter>

<filter-mapping>
<filter-name>httpHeaderSecurity</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

以及：

<security-constraint>
<web-resource-collection >
<web-resource-name >SSL</web-resource-name>
<url-pattern>/*</url-pattern>
<https-method>OPTIONS</https-method>
<https-method>HEAD</https-method>
<https-method>TRACE</https-method>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>