
main change is to force spring security to always send user to welcome.mvc after login which gets their session setup properly before redirecting to start.mvc
59 lines
2.4 KiB
XML
59 lines
2.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:p="http://www.springframework.org/schema/p"
|
|
xmlns:context="http://www.springframework.org/schema/context"
|
|
xmlns:mvc="http://www.springframework.org/schema/mvc"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans
|
|
http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
|
|
http://www.springframework.org/schema/context
|
|
http://www.springframework.org/schema/context/spring-context-3.2.xsd
|
|
http://www.springframework.org/schema/mvc
|
|
http://www.springframework.org/schema/mvc/spring-mvc-3.2.xsd">
|
|
|
|
<context:component-scan base-package="org.owasp.webgoat.controller, org.owasp.webgoat.lessons, org.owasp.webgoat.service" />
|
|
|
|
<!--
|
|
put custom validators here. E.g.:
|
|
<bean class="org.owasp.webgoat.validators.MyCustomValidator" />
|
|
-->
|
|
|
|
<!-- Activates various annotations to be detected in bean classes -->
|
|
<context:annotation-config />
|
|
|
|
<!-- Configures the annotation-driven Spring MVC Controller programming model. -->
|
|
<mvc:annotation-driven />
|
|
|
|
<!-- Import Tiles-related configuration -->
|
|
<!--import resource="tiles-context.xml" /-->
|
|
|
|
|
|
<!-- Declare a view resolver -->
|
|
<!-- Take note of the order. Since we're using TilesViewResolver as well
|
|
We need to define which ViewResolver is called first.
|
|
We chose this InternalResourceViewResolver to be at the bottom order -->
|
|
<bean
|
|
id="viewResolver"
|
|
class="org.springframework.web.servlet.view.InternalResourceViewResolver"
|
|
p:prefix="/WEB-INF/pages/"
|
|
p:suffix=".jsp"
|
|
p:order="1"/>
|
|
|
|
<mvc:interceptors>
|
|
<bean id="webContentInterceptor" class="org.springframework.web.servlet.mvc.WebContentInterceptor">
|
|
<property name="cacheSeconds" value="0" />
|
|
<property name="useExpiresHeader" value="true" />
|
|
<property name="useCacheControlHeader" value="true" />
|
|
<property name="useCacheControlNoStore" value="true" />
|
|
</bean>
|
|
</mvc:interceptors>
|
|
|
|
|
|
<!-- Register the Customer.properties
|
|
<bean id="messageSource"
|
|
class="org.springframework.context.support.ResourceBundleMessageSource">
|
|
<property name="basename" value="org/owasp/webgoat/properties/Customer" />
|
|
</bean>
|
|
-->
|
|
|
|
</beans> |