garydgregory commented on PR #802: URL: https://github.com/apache/commons-vfs/pull/802#issuecomment-6441059108
> I think, but I could be wrong, it is always better to have a security model and threat model, even AI generated, than not having one. But do do have a security model: - https://commons.apache.org/security.html - https://commons.apache.org/threat-model-short-0.1.0.html which also points to its MD source - https://commons.apache.org/threat-model-0.1.0.html which also points to its MD source Whatever we do here should be minimal and layer on top of it. It sure isn't clear from looking at it. Also it completely hallucinates: **legacy but supported** — `http`/`https` Really!?! We're deprecating HTTP access? Who knows what else it made up... -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
