sergehuber opened a new pull request, #842: URL: https://github.com/apache/unomi/pull/842
## Summary - Require `UNOMI_ROOT_PASSWORD` and `UNOMI_HEALTHCHECK_PASSWORD` at startup (no known shipped defaults); update Docker/compose/docs accordingly. - For public context/eventcollector callers: treat the profile cookie as the only profile bearer; refuse unsafe session→profile switches; default profile cookie HttpOnly to true. - Restrict Groovy Actions and Router import/export REST endpoints to system `ADMINISTRATOR`. - Gate `MergeProfilesOnPropertyAction` / `UpdatePropertiesAction` so untrusted callers cannot cross-profile merge/update or write `systemProperties.*`. **Jira:** please create from the local draft at `.local-notes/security-disclosure-2026-08/08-jira-hardening-draft.md` (gitignored) and comment the key here so commits/PR title can be updated with `UNOMI-NNNN`. ## Test plan - [ ] `ShippedAdminPasswordConfigTest`, `RestServiceUtilsImplProfileBindingTest`, action/role unit tests - [ ] `ContextServletIT` profile-binding / public vs private cases - [ ] `RestEndpointRoleSecurityIT`, `ProfileMergeIT` / `PropertiesUpdateActionIT` trusted vs untrusted - [ ] Smoke Docker/compose fails without both password env vars -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
