adamsaghy commented on PR #6351: URL: https://github.com/apache/fineract/pull/6351#issuecomment-5507581702
1. Batch API cross-domain contamination — not addressed. getLoanIdsFromBatchApi is byte-identical to the reviewed version. The loop still harvests the body-level loanId from every sub-request once any one sub-request matches the WC path pattern, with no per-request relativeUrl check. This is the same defect as my finding #1. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
