added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / WEB-INF / faces-config.xml

diff --git a/web/WEB-INF/faces-config.xml b/web/WEB-INF/faces-config.xml
index 44cbda7ec6fd7f0debd3e9bd90be8965a3f4d49b..d181a5635897227883079f7830b40c589adc4eaf 100644 (file)
--- a/web/WEB-INF/faces-config.xml
+++ b/web/WEB-INF/faces-config.xml
@@ -3,6 +3,12 @@
                          xmlns="http://xmlns.jcp.org/xml/ns/javaee"
                          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                          xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-facesconfig_2_2.xsd">
+       <application>
+               <locale-config>
+                       <default-locale>de_DE</default-locale>
+                       <supported-locale>en_US</supported-locale>
+               </locale-config>
+       </application>
        <validator>
                <validator-id>PrivacyTermsCheckboxValidator</validator-id>
                <validator-class>org.mxchange.jcoreee.validator.bool.privacy_terms.PrivacyTermsCheckboxValidator</validator-class>
@@ -61,16 +67,58 @@
                        <from-outcome>admin_index</from-outcome>
                        <to-view-id>/admin/index.xhtml</to-view-id>
                </navigation-case>
-           <navigation-case>
-               <from-outcome>basket</from-outcome>
-               <to-view-id>/basket.xhtml</to-view-id>
-           </navigation-case>
+               <navigation-case>
+                       <from-outcome>basket</from-outcome>
+                       <to-view-id>/basket.xhtml</to-view-id>
+               </navigation-case>
+               <navigation-case>
+                       <from-outcome>item_not_changed</from-outcome>
+                       <to-view-id>/errorHandler.xhtml</to-view-id>
+               </navigation-case>
+       </navigation-rule>
+       <navigation-rule>
+               <from-view-id>/basket.xhtml</from-view-id>
+               <navigation-case>
+                       <from-outcome>checkout</from-outcome>
+                       <to-view-id>/customer/checkout.xhtml</to-view-id>
+               </navigation-case>
+       </navigation-rule>
+       <navigation-rule>
+               <from-view-id>/customer/checkout.xhtml</from-view-id>
+               <navigation-case>
+                       <from-outcome>checkout2</from-outcome>
+                       <to-view-id>/customer/checkout2.xhtml</to-view-id>
+               </navigation-case>
+       </navigation-rule>
+       <navigation-rule>
+               <from-view-id>/index.xhtml</from-view-id>
+               <navigation-case>
+                       <from-outcome>item_added</from-outcome>
+                       <to-view-id>/item_added.xhtml</to-view-id>
+               </navigation-case>
+       </navigation-rule>
+       <navigation-rule>
+               <from-view-id>/customer/checkout2.xhtml</from-view-id>
+               <navigation-case>
+                       <from-outcome>checkout_done</from-outcome>
+                       <to-view-id>/customer/checkout_done.xhtml</to-view-id>
+               </navigation-case>
+               <navigation-case>
+                       <from-outcome>empty_basket</from-outcome>
+                       <to-view-id>/customer/empty_basket.xhtml</to-view-id>
+               </navigation-case>
+       </navigation-rule>
+       <navigation-rule>
+               <from-view-id>/admin/admin_logout.xhtml</from-view-id>
+               <navigation-case>
+                       <from-outcome>index</from-outcome>
+                       <to-view-id>/*</to-view-id>
+               </navigation-case>
        </navigation-rule>
-    <navigation-rule>
-        <from-view-id>/index.xhtml</from-view-id>
-        <navigation-case>
-            <from-outcome>item_added</from-outcome>
-            <to-view-id>/item_added.xhtml</to-view-id>
-        </navigation-case>
-    </navigation-rule>
+       <application>
+               <locale-config>
+                       <default-locale>de</default-locale>
+                       <supported-locale>en_US</supported-locale>
+               </locale-config>
+       </application>
 </faces-config>