sureshanaparti commented on pull request #5729: URL: https://github.com/apache/cloudstack/pull/5729#issuecomment-982449190
I've tested with few other list APIs (listManagementServers, listVirtualMachines, etc) which responds to the integer 'id' passed in the 'id' parameter. Accepting the integer 'id' can be a security concern, if anyone (with valid credentials, without knowing the resource 'uuid') tries with a random integers and the resource exists with that integer id - can get to know the resource details. Is it Ok to accept the integer 'id from the API, or Should this be blocked at the API level? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
