Migrating security fix.

git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/branches@8161 b35dd754-fafc-0310-a699-88a17e54d16e

3_3_1_branch/src/web/WEB-INF/web.xml

@@ -24,7 +24,8 @@
         <init-param>
             <param-name>excludes</param-name>
             <param-value>
-                login.jsp,index.jsp?logout=true,setup/index.jsp,setup/setup-,.gif,.png,error-serverdown.jsp</param-value>
+                login.jsp,index.jsp?logout=true,setup/index.jsp,setup/setup-,.gif,.png,error-serverdown.jsp
+            </param-value>
         </init-param>
     </filter>
 
@@ -83,6 +84,11 @@
         <url-pattern>/*</url-pattern>
     </filter-mapping>
 
+    <filter-mapping>
+        <filter-name>AuthCheck</filter-name>
+        <servlet-name>dwr-invoker</servlet-name>
+    </filter-mapping>
+
     <listener>
         <listener-class>org.jivesoftware.openfire.XMPPContextListener</listener-class>
     </listener>
@@ -102,10 +108,6 @@
     <servlet>
         <servlet-name>dwr-invoker</servlet-name>
         <servlet-class>uk.ltd.getahead.dwr.DWRServlet</servlet-class>
-        <init-param>
-            <param-name>debug</param-name>
-            <param-value>true</param-value>
-        </init-param>
     </servlet>
 
     <servlet>
@@ -126,7 +128,7 @@
         <url-pattern>/getFavicon</url-pattern>
     </servlet-mapping>
 
-     <servlet-mapping>
+    <servlet-mapping>
         <servlet-name>PluginIconServlet</servlet-name>
         <url-pattern>/geticon</url-pattern>
     </servlet-mapping>