Database Reference
In-Depth Information
<init-param>
<param-name> hidden </param-name>
<param-value> true </param-value>
</init-param>
Changing this parameter means that the REST Server will not directly receive
requests; rather, it will only receive requests forwarded from an XQuery controller
(see “URL Mapping Using URL Rewriting” on page 194 ). You can then choose to filter
such requests in your own XQuery controller.
Disabling network services and APIs
eXist provides several network services and APIs that are enabled by default; how‐
ever, it is quite likely that you will not require all of those services in a production
environment. Which services you require will depend on your application, but you
should disable any that are not required by your application and/or users. You do so
by commenting out the servlet , filter , filter-mapping , and listener declara‐
tions in $EXIST_HOME/webapp/WEB-INF/web.xml , as well as any servlet mappings
to them in $EXIST_HOME/webapp/WEB-INF/controller-config.xml . See Table 8-13 .
Table 8-13. eXist's network service components
Servlet
Provides
Impact of disabling
Initializes all logging
services for eXist
eXist will not be able to log any messages. a
org.exist.http.servlets.
Log4jInit
XML-RPC and XML:DB
Remote APIs; removes
RPC and XML:DB Remote
access
Will remove the ability to connect with the Java
Admin Client, as this uses the XML:DB Remote API.
May remove the ability to shut down or back up
eXist if you use shutdown.sh or backup.sh , as these
use the Java Admin Client library.
It may be appropriate to disable this, depending
on your environment and deployment of eXist.
org.exist.xmlrpc.
RpcServlet
REST Server and SOAP
Server
Removes the REST Server and the ability to
navigate the database automatically by URI and
execute XQueries stored in the database by URI.
Removes the ability to create SOAP web services of
XQuery modules.
org.exist.http.servlets.
EXistServlet
JMX information over
HTTP as XML
Removes the ability to retrieve JMX information
over HTTP as XML (see “JMX” on page 387 ).
It is typically recommended to disable this API in
production, or restrict access at a reverse proxy or
firewall.
org.exist.management.client.
JMXServlet
Search WWH ::




Custom Search