[ 
https://issues.apache.org/jira/browse/ISIS-2626?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andi Huber updated ISIS-2626:
-----------------------------
    Description: That's currently a denial of service vector, as HTTP requests 
that happen too early during bootstrapping have the side effect of triggering 
meta-model validation too early, which leaves the application in an unusable 
state. As meta-model validation, while yet only partly inspected, will most 
likely lead to a validation failure that renders the application permanently 
broken until restarted.  (was: That's currently a denial of service vector, as 
HTTP requests that happen too early during bootstrapping have the side effect 
of triggering meta-model validation too early, which leaves the application in 
an unusable state, as meta-model validation while yet only partly inspected 
while most likely lead to a validation failure.)

> Do not serve HTTP requests until the Application is fully initialized.
> ----------------------------------------------------------------------
>
>                 Key: ISIS-2626
>                 URL: https://issues.apache.org/jira/browse/ISIS-2626
>             Project: Isis
>          Issue Type: Improvement
>          Components: Isis Core
>            Reporter: Andi Huber
>            Assignee: Andi Huber
>            Priority: Major
>             Fix For: 2.0.0-M6
>
>
> That's currently a denial of service vector, as HTTP requests that happen too 
> early during bootstrapping have the side effect of triggering meta-model 
> validation too early, which leaves the application in an unusable state. As 
> meta-model validation, while yet only partly inspected, will most likely lead 
> to a validation failure that renders the application permanently broken until 
> restarted.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to