Server scoped cross site script filter

[j2eebank]

Hi,

All our applications on jboss-4.2.2 need to prevent cross site scripting. We have a servlet filter for this. Instead of packaging the filter along with each application, is it possible configure a filter/service at server level ( centralised ) so that all request go via it first and then to application.

Any help is appreciated.

Regards,

Jik

[peterj]

There is a global web.xml located at server/xxx/deploy/jboss-web.deployer/conf. Add the filter there and it should apply to all web apps.

[j2eebank]

Thanks Peter.

Jik