Jody Garnett ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae422bb7f-4808-47e3-837f-13db0e6681e3 ) *created* an issue
GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) / Wish ( https://osgeo-org.atlassian.net/browse/GEOS-11098?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) GEOS-11098 ( https://osgeo-org.atlassian.net/browse/GEOS-11098?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) ENTITY_RESOLUTION_ALLOWLIST=auto to use URLCheck ( https://osgeo-org.atlassian.net/browse/GEOS-11098?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) Issue Type: Wish Assignee: Unassigned Components: Security Created: 09/Aug/23 2:12 AM Priority: Medium Reporter: Jody Garnett ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae422bb7f-4808-47e3-837f-13db0e6681e3 ) This issue is a follow up to https://osgeo-org.atlassian.net/browse/GEOS-10389 seeking to both enable this setting by default, and make use of the URLCheck funcitonality introduced. Presently ENTITY_RESOLUTION_ALLOWLIST: * not defined: restrict local file system access * ENTITY_RESOLUTION_ALLOWLIST : allow www.w3.org schemas.opengis.net www.opengis.net inspire.ec.europa.eu/schemas - ( http://inspire.ec.europa.eu/schemas- ) ENTITY_RESOLUTION_ALLOWLIST=server allows http and https connections to all of the above, and server ( https://osgeo-org.atlassian.net/browse/GEOS-11098#add-comment?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) Add Comment ( https://osgeo-org.atlassian.net/browse/GEOS-11098#add-comment?atlOrigin=eyJpIjoiODk5YWZkZDYxNjcyNDkwMmE0YzllMzg2MzA5NTg0YTkiLCJwIjoiaiJ9 ) Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100233- sha1:7fb7fe8 )
_______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
