[
https://issues.apache.org/jira/browse/ARTEMIS-1435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16177080#comment-16177080
]
ASF GitHub Bot commented on ARTEMIS-1435:
-----------------------------------------
GitHub user gtully opened a pull request:
https://github.com/apache/activemq-artemis/pull/1550
ARTEMIS-1435 - provide default jolokia-access.xml security policy in …
…etc to lock down cors to http.host
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/gtully/activemq-artemis ARTEMIS-1435
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/activemq-artemis/pull/1550.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1550
----
commit 3e8ff005dc7c96f88c7ec10e8467e4281153b858
Author: gtully <[email protected]>
Date: 2017-09-22T20:31:22Z
ARTEMIS-1435 - provide default jolokia-access.xml security policy in etc to
lock down cors to http.host
----
> Expose the Jolokia security configuration for the web console
> -------------------------------------------------------------
>
> Key: ARTEMIS-1435
> URL: https://issues.apache.org/jira/browse/ARTEMIS-1435
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Components: Web Console
> Affects Versions: 2.3.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Fix For: 2.4.0
>
>
> Jolokia JMX-HTTP bridge has advanced security features that are configured
> via a policy file. We should provide a template policy file in our
> configuration for easy access and to lock down the web console to ${http.host}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
