From 656b5dba43db8b4bd7a76ed5716f9574684aebe5 Mon Sep 17 00:00:00 2001
From: Peter Hormanns <peter.hormanns@jalin.de>
Date: Fri, 27 Dec 2019 12:50:52 +0100
Subject: [PATCH] https / confidential only on xmlrpc api

---
 hsarback/conf/WEB-INF/prod-web.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hsarback/conf/WEB-INF/prod-web.xml b/hsarback/conf/WEB-INF/prod-web.xml
index 35699f4..8d9f8eb 100644
--- a/hsarback/conf/WEB-INF/prod-web.xml
+++ b/hsarback/conf/WEB-INF/prod-web.xml
@@ -728,7 +728,7 @@
 	<security-constraint>
        <web-resource-collection>
            	<web-resource-name>Hostsharing Administrative Area</web-resource-name>
-        	<url-pattern>/*</url-pattern>
+        	<url-pattern>/xmlrpc/*</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
            	<transport-guarantee>CONFIDENTIAL</transport-guarantee>