From 6fb1e6bf0232659266caba9c8b6df389ccbaafbd Mon Sep 17 00:00:00 2001
From: jeb228 <jeb228@43c2fc9b-1942-4403-87b2-35b4218f7473>
Date: Thu, 2 Sep 2010 20:14:50 +0000
Subject: [PATCH] VIVO-246 Add a filter to limit the lifetime of trivial
 sessions.

---
 productMods/WEB-INF/web.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/productMods/WEB-INF/web.xml b/productMods/WEB-INF/web.xml
index 44089a4e..58f309fd 100644
--- a/productMods/WEB-INF/web.xml
+++ b/productMods/WEB-INF/web.xml
@@ -195,6 +195,15 @@
   <!-- in 2.4 spec, filter chain order is first by filter-mapping <url-pattern> order in web.xml,
 	 then filter-mapping <servlet-name> order in web.xml -->
 
+  <filter>
+    <filter-name>Session Timeout Limiting Filter</filter-name>
+    <filter-class>edu.cornell.mannlib.vitro.webapp.filters.SessionTimeoutLimitingFilter</filter-class>
+  </filter>
+  <filter-mapping>
+    <filter-name>Session Timeout Limiting Filter</filter-name>
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
+
   <filter>
     <filter-name>Character Set Encoding Filter</filter-name>
     <filter-class>edu.cornell.mannlib.vitro.webapp.filters.CharsetEncodingFilter</filter-class>
@@ -203,6 +212,7 @@
     <filter-name>Character Set Encoding Filter</filter-name>
     <url-pattern>/*</url-pattern>
   </filter-mapping>
+
   <filter>
     <filter-name>JSession Strip Filter</filter-name>
     <filter-class>edu.cornell.mannlib.vitro.webapp.filters.JSessionStripFilter</filter-class>
@@ -220,6 +230,7 @@
     <filter-name>URL Rewriter Filter</filter-name>
     <url-pattern>/*</url-pattern>
   </filter-mapping>
+
   <filter>
     <filter-name>Portal Picker Filter</filter-name>
     <filter-class>edu.cornell.mannlib.vitro.webapp.filters.PortalPickerFilter</filter-class>