<?xml version="1.0" encoding="utf-8"?>
<appengine-web-app xmlns="http://appengine.google.com/ns/1.0">
  <application>caja-hrd</application>
  <runtime>java8</runtime>
  <version>@svnVersion@</version>
  <threadsafe>false</threadsafe>
  <!-- Configure java.util.logging -->
  <system-properties>
    <property name="java.util.logging.config.file"
      value="WEB-INF/logging.properties"/>
  </system-properties>
</appengine-web-app>

<?xml version="1.0" encoding="utf-8"?>
<appengine-web-app xmlns="http://appengine.google.com/ns/1.0">
  <application>caja-hrd</application>
  <runtime>java8</runtime>
  <version>@svnVersion@</version>
  <threadsafe>false</threadsafe>
  <!-- Configure java.util.logging -->
  <system-properties>
    <property name="java.util.logging.config.file"
      value="WEB-INF/logging.properties"/>
  </system-properties>
  <env-variables>
    <env-var name="DISABLE_LEGACY_METADATA_SERVER_ENDPOINTS" value="true" />
  </env-variables>
</appengine-web-app>

Set DISABLE_LEGACY_METADATA_SERVER_ENDPOINTS to prevent SSRF attacks.
Set DISABLE_LEGACY_METADATA_SERVER_ENDPOINTS to prevent SSRF attacks.
