tripodsan commented on pull request #89:
URL: 
https://github.com/apache/jackrabbit-filevault/pull/89#issuecomment-651463289


   > Why is that? Having it in the repo allows to configure tasks via packages 
instead of via Servlet/API only. I don't see any security implications as 
starting tasks still require a dedicated session!
   
   ok..makes sense. so you would store it in the 'stopped' state without any 
credentials and progress information. then I guess the repository is ok.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to