You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@isis.apache.org by "Andi Huber (Jira)" <ji...@apache.org> on 2021/04/30 11:32:00 UTC
[jira] [Resolved] (ISIS-2626) Do not serve HTTP requests until the
Application is fully initialized.
[ https://issues.apache.org/jira/browse/ISIS-2626?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andi Huber resolved ISIS-2626.
------------------------------
Resolution: Fixed
Fixed. HTTP requests no longer interfere with MM validation.
> Do not serve HTTP requests until the Application is fully initialized.
> ----------------------------------------------------------------------
>
> Key: ISIS-2626
> URL: https://issues.apache.org/jira/browse/ISIS-2626
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Reporter: Andi Huber
> Assignee: Andi Huber
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> That's currently a denial of service vector, as HTTP requests that happen too early during bootstrapping have the side effect of triggering meta-model validation too early, which leaves the application in an unusable state. As meta-model validation, while yet only partly inspected, will most likely lead to a validation failure that renders the application permanently broken until restarted.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)