How to filter external HTTP requests using on remote host location and GET parameters with Tomcat8?

Asked Aug 31 '18 at 14:26

Active Sep 01 '18 at 13:22

Viewed 73 times

I have a tomcat 8 web applications server and it has a running application (/app). This /app can be accessed from both internal and external HTTP GET requests but 1 request from external should be filtered and returns error if it is not requested from localhost.

The request has this pattern /app?query=delete&id=a, it should work if it is http://localhost:8080/app?query=deletel&id=a, but not http://domain:8080/app?query=delete&id=a.

How can I do it only with tomcat 8 or firewall if necessary? I'm using Linux system.

edited Sep 01 '18 at 13:22

peterh

4,914
13
29
44

asked Aug 31 '18 at 14:26

Bằng Rikimaru

What if I want to trick your system and try an URL `http://domain:8080/app?id=a&query=delete1`? – peterh Sep 01 '18 at 13:21
@peterh It should throw an error, because this request cannot be done from external. – Bằng Rikimaru Sep 03 '18 at 06:01
Probably there is no builtin servlet filter in Tomcat for that, but it would be easy to implement one. – peterh Sep 03 '18 at 06:55

How to filter external HTTP requests using on remote host location and GET parameters with Tomcat8?

0 Answers0