Remoting does not provide configurable limiting of exposed resources
--------------------------------------------------------------------
Key: SHALE-344
URL: http://issues.apache.org/struts/browse/SHALE-344
Project: Shale
Issue Type: Bug
Components: Remoting
Reporter: Craig McClanahan
Shale Remoting's current Processor implementations provide limited hard coded
limitations on what resources may be accessed (cannot download classpath
resources named "*.class", cannot download webapp resources named
"/WEB-INF/*"), but they need to provide configurable settings for more fine
grain control. In addition, reasonably secure defaults should be provided.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/struts/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
