[Geoserver-devel] [JIRA] (GEOS-10974) GetLegendGraphics with WMS Cascading doesn't use authentication

Benjamin Mikkelsen ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=70121%3A58b98fe0-d7c8-414e-8053-0906eaa91683 ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOTYyNzQ5Yjk2YWU5NGIzMzg0NmJmYmNiMDM2ZjAwNmUiLCJwIjoiaiJ9 ) / Bug (

[Geoserver-devel] [JIRA] (GEOS-10975) JMS clustering reports error about ReferencedEnvelope type not being whitelisted in XStream

Andrea Aime ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae9469ffc-5e16-4c2b-b7b0-b9c46e912f9e ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOGU5MmJjNmYyNWQ5NDIzODk1M2ZlY2Q0ZGU5NGZlZmYiLCJwIjoiaiJ9 ) / Bug ( https

Re: [Geoserver-devel] GSIP 218: Control remote HTTP requests, merged on main... now what?

On Wed, May 10, 2023 at 2:06 AM Jody Garnett wrote: > +1 > > I know our policy is to make stable l, and especially maintenance > releases, preserve existing workflow. In this case I think the safety > improvement is worth asking admins to pay attention. Security is special > :) > Hmm... nope,

[Geoserver-devel] [JIRA] (GEOS-10976) OGC service capabilites documents do list extra authorities only for special cases

Andrea Aime ( https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae9469ffc-5e16-4c2b-b7b0-b9c46e912f9e ) *created* an issue GeoServer ( https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiOWRkMzMyYjI0MDYxNDljNmFkZWI1NzYyY2Y2Yzk5ZjAiLCJwIjoiaiJ9 ) / Bug ( https