tripodsan commented on pull request #89: URL: https://github.com/apache/jackrabbit-filevault/pull/89#issuecomment-651463289
> Why is that? Having it in the repo allows to configure tasks via packages instead of via Servlet/API only. I don't see any security implications as starting tasks still require a dedicated session! ok..makes sense. so you would store it in the 'stopped' state without any credentials and progress information. then I guess the repository is ok. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org