From b813aed07ff4aec89c0bb4594a87ee4fcb82ad59 Mon Sep 17 00:00:00 2001
From: Simon Brandhof <simon.brandhof@sonarsource.com>
Date: Thu, 6 Jul 2017 12:29:03 +0200
Subject: [PATCH] Disable support of Tomcat WebSocket and JSP

---
 .../src/main/java/org/sonar/server/app/TomcatContexts.java      | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/sonar-server/src/main/java/org/sonar/server/app/TomcatContexts.java b/server/sonar-server/src/main/java/org/sonar/server/app/TomcatContexts.java
index 3c567346f16..98145d83e46 100644
--- a/server/sonar-server/src/main/java/org/sonar/server/app/TomcatContexts.java
+++ b/server/sonar-server/src/main/java/org/sonar/server/app/TomcatContexts.java
@@ -106,6 +106,8 @@ public class TomcatContexts {
       context.setJarScanner(new NullJarScanner());
       context.setAllowCasualMultipartParsing(true);
       context.setCookies(false);
+      // disable JSP and WebSocket support
+      context.setContainerSciFilter("org.apache.tomcat.websocket.server.WsSci|org.apache.jasper.servlet.JasperInitializer");
       return context;
     } catch (ServletException e) {
       throw new IllegalStateException("Fail to configure webapp from " + dir, e);
-- 
2.39.5