added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / WEB-INF / faces-config.xml

diff --git a/web/WEB-INF/faces-config.xml b/web/WEB-INF/faces-config.xml
index c1187b0f50ab816d331b3a3786f4a9f8c6a3faa4..d181a5635897227883079f7830b40c589adc4eaf 100644 (file)
--- a/web/WEB-INF/faces-config.xml
+++ b/web/WEB-INF/faces-config.xml
@@ -3,6 +3,12 @@
                          xmlns="http://xmlns.jcp.org/xml/ns/javaee"
                          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                          xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-facesconfig_2_2.xsd">
+       <application>
+               <locale-config>
+                       <default-locale>de_DE</default-locale>
+                       <supported-locale>en_US</supported-locale>
+               </locale-config>
+       </application>
        <validator>
                <validator-id>PrivacyTermsCheckboxValidator</validator-id>
                <validator-class>org.mxchange.jcoreee.validator.bool.privacy_terms.PrivacyTermsCheckboxValidator</validator-class>