tripodsan commented on pull request #89:
URL: 
https://github.com/apache/jackrabbit-filevault/pull/89#issuecomment-651657301


   > Would require API changes, as currently only starting requires passing a 
session. Also I don't see the additional benefit here.
   > 
   
   An attacker could add tasks that copy (confidential) content to his own 
repository and then _somehow_ manage to get the start started. especially if 
the entire process is automated, this could easily happen unnoticed. 
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to