You are viewing a plain text version of this content. The canonical link for it is here.
Posted to gitbox@activemq.apache.org by "mattrpav (via GitHub)" <gi...@apache.org> on 2026/10/21 12:03:51 UTC
[PR] [6.3.x] Tighten default Jolokia access policy and bind the web console to loo… [activemq]
mattrpav opened a new pull request, #2721:
URL: https://github.com/apache/activemq/pull/2721
…pback (#2639)
- jolokia-access.xml: list the allowed read-only operations explicitly instead of a wildcard, list the allowed origins for strict checking, and let denied operation names match a name sent with its signature
- jetty-spring.properties: bind the http/https connectors to 127.0.0.1
- JettyServerBean: -Djetty.host overrides the connector bind address
- add tests evaluating the shipped Jolokia policy and Jetty configuration
(cherry picked from commit 58c1f024e2ab1f6b884f07981f42b33f468e46ac)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [PR] [6.3.x] Tighten default Jolokia access policy and bind the web console to loo… [activemq]
Posted by "jbonofre (via GitHub)" <gi...@apache.org>.
jbonofre commented on PR #2721:
URL: https://github.com/apache/activemq/pull/2721#issuecomment-6315672934
I thought we wanted this only for 6.4.0. I'm fine to backport but it can be seen as a breaking change.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [PR] [6.3.x] Tighten default Jolokia access policy and bind the web console to loo… [activemq]
Posted by "mattrpav (via GitHub)" <gi...@apache.org>.
mattrpav merged PR #2721:
URL: https://github.com/apache/activemq/pull/2721
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact