cuba-platform/uberjar

CUBA Uber JAR runner

uberjar's Issues

Add ability to specify custom Handler in Jetty configuration file

Now there is no ability to specify any Handler in a Jetty configuration XML (e.g. GzipHandler).
com.haulmont.uberjar.CubaJettyServer#createServer method overrides all specified handlers.

Update jetty version

Consider update version of jetty (at least bugfix) as currently rather old is used: jetty-9.4.19 Jun 10, 2019
https://github.com/eclipse/jetty.project/releases

Make JSESSION id cookies httpOnly in Jetty

Environment

• Platform version: 7.0.0

Description of the bug or enhancement

Do not expose JSESSIONID to JavaScript by default.

Update Jetty to 9.4

https://app.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-174011

Single Uber Jar with Portal and without Web module

• Create an application using CUBA Studio
• Remove web module
• Add portal module
• Add Uber building
• Build and run Uber Jar:
• Open URL from browser: localhost:8080/app-portal/
  ER: page with login
  AR: 404 error

Encoding issues with freemarker (front)

Cyrillic symbols in front module's index.html are being converted to question marks when served via uberJar.

For the front module we convert index.html to freemarker template index.ftl in order to make some runtime processing.
It seems freemarker is not configured to work with UTF encoding, e.g.:

  <init-param>
    <param-name>ContentType</param-name>
    <param-value>text/html; charset=UTF-8</param-value> 
  </init-param>

Unable to access to React front end with custom URL

Environment

• Platform version: 7.2.11
• Forum issue: https://www.cuba-platform.com/discuss/t/confusion-deploying-react-uberjar-url/14751

Description of the bug or enhancement

1. Create a small project
2. Add React front module
3. Set up single UberJar task
4. Try to run the application from the command line using frontContextName command line argument (see docs)
   E.g. java -jar app.jar -frontContextName sales

A.R. React front-end will not be available by http://localhost:8080/sales

5. Change PUBLIC_URL variable in .env.production.local
6. Start UberJar

A.R. React front-end will not be available

Update Jetty version to 9.4.49.v20220914

See forum

Update Jetty to 9.3.27.v20190418

There are existing vulnerabilities:

• https://app.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-174560
• https://app.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-174479

One can be fixed only with 9.4:

• https://app.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-174011