Check secure single-jsp app with confidential transport guarantee

pom.xml

@@ -11,7 +11,7 @@
 	<url>https://github.com/kwart/secured-webapp-template</url>
 
 	<build>
-		<finalName>counter-distributable</finalName>
+		<finalName>checksecure-confidential</finalName>
 
 		<plugins>
 			<plugin>

src/main/webapp/WEB-INF/web.xml

@@ -5,6 +5,14 @@
       xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
       version="3.1">
 
-    <distributable/>
+    <security-constraint>
+    	<web-resource-collection>
+    		<web-resource-name>All confidential</web-resource-name>
+    		<url-pattern>/*</url-pattern>
+    	</web-resource-collection>
+    	<user-data-constraint>
+    		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
+    	</user-data-constraint>
+    </security-constraint>
 
 </web-app>

src/main/webapp/index.jsp

@@ -1,10 +1,4 @@
-<%@ page language="java" pageEncoding="UTF-8" contentType="text/plain;charset=utf-8"
-%><%
-    Integer requestCount = (Integer)session.getAttribute("requestCount");
-    if (requestCount == null) {
-        requestCount = 0;
-    }
-    session.setAttribute("requestCount", ++requestCount);
-
-%>Host=<%= System.getProperty("jboss.node.name") %>
-Request count=<%= requestCount %>
+<%@ page language="java" pageEncoding="UTF-8" contentType="text/plain;charset=utf-8" session="false"
+%>Secure=<%= request.isSecure() %>
+Scheme=<%= request.getScheme() %>
+Protocol=<%= request.getProtocol() %>