mattrpav commented on PR #2539: URL: https://github.com/apache/activemq/pull/2539#issuecomment-6019907407
@cshannon the commons-net drags a _ton_ of protocol handlers with it. I'm not in favor of pulling something that wide in b/c that seems ripe for CVE issues that aren't related to anything ActiveMQ uses (POP3, SMTP, tftp, ftp, imap, finger, whois, etc). The actual CIDR parsing only has about ~30-50 lines of code. The loader and converter are things we'd have to code for to support various formats to do things like allowing people to use the publicly available IP CIDR lists by country. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information, visit: https://activemq.apache.org/contact
