Merge branch '2022.06.x' into 2023.06.x

Author: sebhofmann

src/main/resources/config/mcr-waf-plugin/mycore.properties

@@ -17,7 +17,8 @@ MCR.Startup.Class=%MCR.Startup.Class%,org.mycore.waf.FilterRegistrationStartupHa
 
 # IP Allow List (comma-separated, supports CIDR notation)
 # Example: MCR.WAF.AllowedIPs=127.0.0.1,192.168.1.0/24,10.0.0.1
-#MCR.WAF.AllowedIPs=
+# DFN URN Resolver
+MCR.WAF.AllowedIPs=193.175.96.0/24,193.175.97.0/24
 
 # Path Allow List (comma-separated regex patterns)
 # Example: MCR.WAF.AllowedPaths=/api/public/.*,/health,/metrics
@@ -29,8 +30,8 @@ MCR.WAF.AllowedPaths=%MCR.WAF.AllowedPaths%,\
 /api/.*,\
 /ws/.*,\
 /servlets/OAIDataProvider.*,\
-/servlets/MCRDFGServlet/*,\
-/servlets/MCRDFGThumbnail/*
+/servlets/MCRDFGServlet/.*,\
+/servlets/MCRDFGThumbnail/.*
 
 ##############################################################################
 # Known Bot Verification via Reverse DNS