Thë 굽은ㄴr무™

 <subsystem xmlns="urn:jboss:domain:logging:1.5">
            <!--
            <console-handler name="CONSOLE">
                <level name="INFO"/>
                <formatter>
                    <named-formatter name="COLOR-PATTERN"/>
                </formatter>
            </console-handler>
            -->
            <periodic-rotating-file-handler name="FILE" autoflush="true">
                <formatter>
                    <named-formatter name="PATTERN"/>
                </formatter>
                <file relative-to="jboss.server.log.dir" path="server/server.log"/>
                <suffix value=".yyyy-MM-dd"/>
                <append value="true"/>
            </periodic-rotating-file-handler>
            <logger category="com.arjuna">
                <level name="WARN"/>
            </logger>
            <logger category="org.apache.tomcat.util.modeler">
                <level name="WARN"/>
            </logger>
            <logger category="org.jboss.as.config">
                <level name="DEBUG"/>
            </logger>
            <logger category="sun.rmi">
                <level name="WARN"/>
            </logger>
            <logger category="jacorb">
                <level name="WARN"/>
            </logger>
            <logger category="jacorb.config">
                <level name="ERROR"/>
            </logger>
            <logger category="org.apache.catalina.core.AprLifecycleListener">
                <level name="DEBUG"/>
            </logger>
            <logger category="org.jboss.as.controller.management-deprecated">
                <level name="OFF"/>
            </logger>
            <logger category="org.jboss.as.clustering.web.infinispan">
                <level name="TRACE"/>
            </logger>
            <root-logger>
                <level name="INFO"/>
                <handlers>
                    <!--
                    <handler name="CONSOLE"/>
                    -->
                    <handler name="FILE"/>
                </handlers>
            </root-logger>
            <formatter name="PATTERN">
                <pattern-formatter pattern="%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n"/>
            </formatter>
            <formatter name="COLOR-PATTERN">
                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n"/>
            </formatter>
</subsystem>

 DENY

 해당 페이지는 frame을 표시할 수 없다. 

 SAMEORIGIN 

 해당 페이지와 동일한 orgin에 해당하는 frame만 표시할 수 있다.

 ALLOW-FROM uri 

 해당 페이지는 지정된 orgin에 해당하는 frame만 표시할 수 있다.

Header always append X-Frame-Options SAMEORIGIN 

response.addHeader("X-Frame-Options", "SAMEORIGIN"); 

<?xml version="1.0" encoding="UTF-8"?>

<web-app id="WebApp_ID" version="2.4"
    xmlns="http://java.sun.com/xml/ns/j2ee"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
    <display-name>OWASP ClickjackFilter</display-name>
    <filter>
        <filter-name>ClickjackFilterDeny</filter-name>
        <filter-class>org.owasp.filters.ClickjackFilter</filter-class>
        <init-param>
            <param-name>mode</param-name>
            <param-value>DENY</param-value>
        </init-param>
    </filter>
    
    <filter>
        <filter-name>ClickjackFilterSameOrigin</filter-name>
        <filter-class>org.owasp.filters.ClickjackFilter</filter-class>
        <init-param>
            <param-name>mode</param-name>
            <param-value>SAMEORIGIN</param-value>
        </init-param>
    </filter>
    
    <!--  use the Deny version to prevent anyone, including yourself, from framing the page -->
    <filter-mapping> 
        <filter-name>ClickjackFilterDeny</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    
    <!-- use the SameOrigin version to allow your application to frame, but nobody else
    <filter-mapping> 
        <filter-name>ClickjackFilterSameOrigin</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>
    -->
    
</web-app>

package org.owasp.filters;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

public class ClickjackFilter implements Filter 
{

    private String mode = "DENY";
    	
    /**
     * Add X-FRAME-OPTIONS response header to tell IE8 (and any other browsers who
     * decide to implement) not to display this content in a frame. For details, please
     * refer to http://blogs.msdn.com/sdl/archive/2009/02/05/clickjacking-defense-in-ie8.aspx.
     */
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        HttpServletResponse res = (HttpServletResponse)response;
        res.addHeader("X-FRAME-OPTIONS", mode );			
        chain.doFilter(request, response);
    }
    
    public void destroy() {
    }
    
    public void init(FilterConfig filterConfig) {
        String configMode = filterConfig.getInitParameter("mode");
        if ( configMode != null ) {
            mode = configMode;
        }
    }
    
}

<script>

if(top != window) {
  top.location = window.location
}
</script>

// Sample Security Constraint
<security-constraint>
  <web-resource-collection>
      <web-resource-name>restricted methods</web-resource-name>
      <url-pattern>/*</url-pattern>
      <http-method>PUT</http-method>
      <http-method>POST</http-method>
      <http-method>DELETE</http-method>
      <http-method>OPTIONS</http-method>
      <http-method>TRACE</http-method>
  </web-resource-collection>
  <auth-constraint />
</security-constraint> 

# rewrite 모듈 로드가 안 된 경우 주석 해제
# LoadModule rewrite_module modules/mod_rewrite.so
<IfModule mod_rewrite.c>
    RewriteEngine On

    # GET, POST를 제외하고 모두 405 페이지로 이동
    RewriteCond %{REQUEST_METHOD} !^(GET|POST)
    RewriteRule .* - [R=405,L] 
</IfModule>

{
    # 글꼴 변경
    "font_face": "D2Coding",

    "font_options": [
        "no_italic",  # Italic체 사용 안함
        "no_bold"  # bold체 사용 안함
    ],

    "ignored_packages":
    [
        "Vintage"
    ]

} 

[
    # Ctrl + W로 탭만 닫고 프로그램 닫지 않기
    { "keys": ["ctrl+w"], "command": "close_file" },

    # Ctrl + D 로 현재 라인 삭제
    { "keys": ["ctrl+d"], "command": "cut" }
] 

<?xml version="1.0" encoding="utf-8"?>
<colorTheme id="1" name="Oblivion2" modified="2011-04-28 07:41:35" author="Roger Dudler" website="http://www.rogerdudler.com/?p=362">
    <searchResultIndication color="#000000" />
    <filteredSearchResultIndication color="#000000" />
    <occurrenceIndication color="#000000" />
    <writeOccurrenceIndication color="#000000" />
    <findScope color="#111111" />
    <deletionIndication color="#D25252" />
    <sourceHoverBackground color="#000000" />
    <singleLineComment color="#A8A8A8" />
    <multiLineComment color="#A8A8A8" />
    <commentTaskTag color="#A8A8A8" />
    <javadoc color="#A8A8A8" />
    <javadocLink color="#548FA0" />
    <javadocTag color="#A8A8A8" bold="true" />
    <javadocKeyword color="#EA9C77" />
    <class color="#D25252" />
    <interface color="#D197D9" />
    <method color="#FFFFFF" />
    <methodDeclaration color="#BED6FF" />
    <bracket color="#D8D8D8" />
    <number color="#7FB347" />
    <string color="#FFC600" />
    <operator color="#D8D8D8" />
    <keyword color="#FFFFFF" />
    <annotation color="#FFFFFF" />
    <staticMethod color="#BED6FF" />
    <localVariable color="#79ABFF" />
    <localVariableDeclaration color="#BED6FF" />
    <field color="#BED6FF" />
    <staticField color="#EFC090" />
    <staticFinalField color="#EFC090" />
    <deprecatedMember color="#D25252" strikethrough="true" />
    <enum color="#7FB347" />
    <inheritedMethod color="#BED6FF" />
    <abstractMethod color="#BED6FF" />
    <parameterVariable color="#79ABFF" />
    <typeArgument color="#BFA4A4" />
    <typeParameter color="#BFA4A4" />
    <constant color="#EFC090" />
    <background color="#1E1E1E" />
    <currentLine color="#2A2A2A" />
    <foreground color="#D8D8D8" />
    <lineNumber color="#D0D0D0" />
    <selectionBackground color="#000000" />
    <selectionForeground color="#D0D0D0" />
</colorTheme>