This is an automated email from the ASF dual-hosted git repository.

ningjiang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/servicecomb-pack.git


The following commit(s) were added to refs/heads/master by this push:
     new 3220db48 Disable insecure spring boot actuator endpoints by default.
3220db48 is described below

commit 3220db4832492146ab00fc072884fddd13056341
Author: Lei Zhang <[email protected]>
AuthorDate: Wed Mar 13 13:20:28 2024 +0800

    Disable insecure spring boot actuator endpoints by default.
    
    Spring Boot Actuator only exposes the /actuator/health /actuator/info 
endpoint by default
---
 alpha/alpha-server/src/main/resources/application.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/alpha/alpha-server/src/main/resources/application.yaml 
b/alpha/alpha-server/src/main/resources/application.yaml
index 59ed23f8..3cb99aa7 100644
--- a/alpha/alpha-server/src/main/resources/application.yaml
+++ b/alpha/alpha-server/src/main/resources/application.yaml
@@ -140,7 +140,7 @@ management:
   endpoints:
     web:
       exposure:
-        include: "*"
+        include: "health,info"
   health:
     redis:
       enabled: false

Reply via email to