This is an automated email from the ASF dual-hosted git repository.

jinwoo pushed a commit to branch support/1.15
in repository https://gitbox.apache.org/repos/asf/geode.git


The following commit(s) were added to refs/heads/support/1.15 by this push:
     new 570990909e Disallow GET requests to /management/commands endpoint 
(#7910)
570990909e is described below

commit 570990909e6fd1e491f01471ad30ee3c2dbff72c
Author: wmh1108-sas <[email protected]>
AuthorDate: Thu Aug 28 04:59:35 2025 -0400

    Disallow GET requests to /management/commands endpoint (#7910)
    
    * Disallow GET requests to /management/commands endpoint
    
    (cherry picked from commit c8f9fd6e35efbdad900e13fb89fedba0ade79ddf)
---
 .../management/internal/web/controllers/ShellCommandsController.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
 
b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
index dc7a8f0ced..3bc43a48e8 100644
--- 
a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
+++ 
b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
@@ -79,7 +79,7 @@ public class ShellCommandsController extends 
AbstractCommandsController {
 
   private static final String DEFAULT_INDEX_TYPE = "range";
 
-  @RequestMapping(method = {RequestMethod.GET, RequestMethod.POST}, value = 
"/management/commands")
+  @RequestMapping(method = {RequestMethod.POST}, value = 
"/management/commands")
   public ResponseEntity<InputStreamResource> command(@RequestParam(value = 
"cmd") String command,
       @RequestParam(value = "resources", required = false) MultipartFile[] 
fileResource)
       throws IOException {

Reply via email to