Jetty vulnerability

https://webtide.com/indexing-listing-vulnerability-in-jetty/

https://www.eclipse.org/lists/jetty-dev/msg03298.html

org.adempiere.server/WEB-INF/web.xml

@@ -54,6 +54,14 @@
             <param-value>org.adempiere.web.server.ServerApplication</param-value>
       </init-param>
     </servlet> -->
+    <servlet>
+    	<servlet-name>default</servlet-name>
+    	<servlet-class>org.eclipse.jetty.servlet.DefaultServlet</servlet-class>
+    	<init-param>
+      		<param-name>dirAllowed</param-name>
+      		<param-value>false</param-value>
+    	</init-param>
+  	</servlet>
 	<servlet-mapping>
 		<servlet-name>JnlpDownloadServlet</servlet-name>
 		<url-pattern>*.jnlp</url-pattern>

org.adempiere.ui.zk/WEB-INF/web.xml

@@ -35,6 +35,14 @@
       <!-- Remove async-supported if you are not using Servlet 3.0 -->
       <async-supported>true</async-supported>
     </servlet>
+    <servlet>
+    	<servlet-name>default</servlet-name>
+    	<servlet-class>org.eclipse.jetty.servlet.DefaultServlet</servlet-class>
+    	<init-param>
+      		<param-name>dirAllowed</param-name>
+      		<param-value>false</param-value>
+    	</init-param>
+  	</servlet>
     <servlet-mapping>
       <servlet-name>AtmosphereServlet</servlet-name>
       <url-pattern>/zkau/comet</url-pattern>

org.idempiere.webservices/WEB-INF/web.xml

@@ -27,7 +27,14 @@
 		</servlet-class>
 		<load-on-startup>1</load-on-startup>
 	</servlet>
-
+	<servlet>
+    	<servlet-name>default</servlet-name>
+    	<servlet-class>org.eclipse.jetty.servlet.DefaultServlet</servlet-class>
+    	<init-param>
+      		<param-name>dirAllowed</param-name>
+      		<param-value>false</param-value>
+    	</init-param>
+  	</servlet>
 	<servlet-mapping>
 		<servlet-name>CXFServlet</servlet-name>
 		<url-pattern>/services/*</url-pattern>