You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@shale.apache.org by "Craig McClanahan (JIRA)" <ji...@apache.org> on 2006/11/30 23:56:57 UTC

[jira] Assigned: (SHALE-344) Remoting does not provide configurable limiting of exposed resources

     [ http://issues.apache.org/struts/browse/SHALE-344?page=all ]

Craig McClanahan reassigned SHALE-344:
--------------------------------------

    Assignee: Craig McClanahan

> Remoting does not provide configurable limiting of exposed resources
> --------------------------------------------------------------------
>
>                 Key: SHALE-344
>                 URL: http://issues.apache.org/struts/browse/SHALE-344
>             Project: Shale
>          Issue Type: Bug
>          Components: Remoting
>            Reporter: Craig McClanahan
>         Assigned To: Craig McClanahan
>
> Shale Remoting's current Processor implementations provide limited hard coded limitations on what resources may be accessed (cannot download classpath resources named "*.class", cannot download webapp resources named "/WEB-INF/*"), but they need to provide configurable settings for more fine grain control.  In addition, reasonably secure defaults should be provided.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/struts/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira