[
https://issues.apache.org/jira/browse/JCR-4960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17750304#comment-17750304
]
Julian Reschke edited comment on JCR-4960 at 8/8/23 10:32 AM:
--------------------------------------------------------------
trunk: (2.21.19) [r1911410|http://svn.apache.org/r1911410]
2.20: [r1911544|http://svn.apache.org/r1911544]
was (Author: reschke):
trunk: [r1911410|http://svn.apache.org/r1911410]
> Disable RMI by default
> ----------------------
>
> Key: JCR-4960
> URL: https://issues.apache.org/jira/browse/JCR-4960
> Project: Jackrabbit Content Repository
> Issue Type: Task
> Components: jackrabbit-jcr-rmi, jackrabbit-standalone,
> jackrabbit-standalone-components, jackrabbit-webapp
> Reporter: Manfred Baedke
> Assignee: Manfred Baedke
> Priority: Major
> Fix For: 2.22, 2.20.12, 2.21.19
>
> Attachments: jcr-4960.patch
>
>
> Because it's inherently prone to security issues, RMI should be disabled by
> default. The documentation needs to be updated to reflect that and to explain
> how to enable it again.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
