[
https://issues.apache.org/jira/browse/ARTEMIS-4763?focusedWorklogId=918303&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-918303
]
ASF GitHub Bot logged work on ARTEMIS-4763:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 08/May/24 11:56
Start Date: 08/May/24 11:56
Worklog Time Spent: 10m
Work Description: mattrpav commented on PR #4924:
URL:
https://github.com/apache/activemq-artemis/pull/4924#issuecomment-2100411588
There is a value in defense in depth. Attackers are scanning source code
trees looking for unprotected deserialization and then crafting entry points.
While the config is stored on a filesystem out of the box —- in the wild
files become ConfigMaps, mounts become network mounts, config files are stored
in scm, or other CI/CD tool chain, etc etc.
Issue Time Tracking
-------------------
Worklog Id: (was: 918303)
Time Spent: 1h 20m (was: 1h 10m)
> properties config - support metrics plugin, conversion of .class for non
> string attributes and empty init
> ----------------------------------------------------------------------------------------------------------
>
> Key: ARTEMIS-4763
> URL: https://issues.apache.org/jira/browse/ARTEMIS-4763
> Project: ActiveMQ Artemis
> Issue Type: New Feature
> Components: Configuration
> Affects Versions: 2.33.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Priority: Major
> Time Spent: 1h 20m
> Remaining Estimate: 0h
>
> the metrics plugin is not a broker plugin, so cannot be initialised via the
> broker plugins collection. We can only add .class instances to collections.
> The metrics instance is an attribute that needs a class type argument on the
> metrics configuration.
> supporting a conversion to any non string scalar type using a .class value
> will work nicely.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
