Backport: disable Jersey generation WADL for OPTIONS request
* WADL exposes available method names on Jersey classes, which can be a
security concern
* This feature also does not currently work with Java > 8 since we don't
provide a JAXB runtime implementation.
@@ -423,6 +423,7 @@ public abstract class Application<T extends RestConfig> {
metricTags, restConfig.getTime()));
config.property(ServerProperties.BV_SEND_ERROR_IN_RESPONSE, true);
+ config.property(ServerProperties.WADL_FEATURE_DISABLE, true);
}
/**
