Amichai Rothman created ARIES-2123: -------------------------------------- Summary: TCP Provider allows invoking arbitrary methods on the service object Key: ARIES-2123 URL: https://issues.apache.org/jira/browse/ARIES-2123 Project: Aries Issue Type: Bug Components: Remote Service Admin Affects Versions: rsa-1.16.1 Reporter: Amichai Rothman
The TCP Provider method invoker invokes any method on the service object. It should restrict invocations only to methods that are declared in the exported interfaces, and prevent invocation of other implementation/private methods that are not explicitly exported. -- This message was sent by Atlassian Jira (v8.20.10#820010)