Adobe Aem - interface /content.xml

[RobertoLa3]

Good morning,

on an Adobe Aem portal when you call the url home adding “/content.xml” the Cms returns an xml of many gigabytes.

What is the “/content.xml” interface for and is it possible to block it?

Thanks

[arunpatidar]

Hi @RobertoLa3 

You need to block this from dispatcher filters.
The thumb rule is block everything and allow what should be seen by end user.

https://medium.com/@toimrank/aem-dispatcher-filter-section-a8c03a92c256 

[Raja_Reddy · Accepted solution]

Hi @RobertoLa3 
 dispatcher.any configuration file found in the conf.d directory of your Apache HTTP Server setup.
Add a Filter Rule: Add a filter rule to block requests to /content.xml. This can be done by adding the following lines to the /filter section of your dispatcher.any file:

/filter
{
...
/0001 { /type "deny" /url "/content.xml" }
...
}

Update the Apache HTTP Server Configuration
Apache configuration file named httpd.conf or located within the conf directory.
Add a URL Block: Add a directive to block access to /content.xml:
<Location "/content.xml">
Require all denied
</Location>

After making these changes restart both the Apache HTTP Server and the Dispatcher to apply the new configuration.

I did same in my last project and it is working fine