Example Jetty Exploit

HTTPServer.java

import org.eclipse.jetty.server.Server;
  
public static HTTPServer startUpAnHTTPServer(WebQueryInterface wqi, UserManager um)
   {
      HTTPServer httpServer = new HTTPServer();
      if (HTTPServer.getUserManager() == null)
      {
         userManager = um;
      }
      //Exploitable, this port can be accessed by anyone on the local network
      httpServer.underlyingServer = new Server(SERVER_PORT);
      
      //Safe, only can be accessed by localhost
      //httpServer.underlyingServer = new Server(new InetSocketAddress("localhost", SERVER_PORT));
      httpServer.underlyingServer.setHandler(HandlerManager.makeHandler(wqi));

      try
      {
         httpServer.underlyingServer.start();
      }
      catch (Exception e)
      {
         logger.error("There was a problem starting the server", e);
      }

      return httpServer;

   }