(geode) branch support/1.15 updated: Disallow GET requests to /management/commands endpoint (#7910)

[ji...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jinwoo pushed a commit to branch support/1.15
in repository https://gitbox.apache.org/repos/asf/geode.git


The following commit(s) were added to refs/heads/support/1.15 by this push:
     new 570990909e Disallow GET requests to /management/commands endpoint (#7910)
570990909e is described below

commit 570990909e6fd1e491f01471ad30ee3c2dbff72c
Author: wmh1108-sas <57...@users.noreply.github.com>
AuthorDate: Thu Aug 28 04:59:35 2025 -0400

    Disallow GET requests to /management/commands endpoint (#7910)
    
    * Disallow GET requests to /management/commands endpoint
    
    (cherry picked from commit c8f9fd6e35efbdad900e13fb89fedba0ade79ddf)
---
 .../management/internal/web/controllers/ShellCommandsController.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
index dc7a8f0ced..3bc43a48e8 100644
--- a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
+++ b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
@@ -79,7 +79,7 @@ public class ShellCommandsController extends AbstractCommandsController {
 
   private static final String DEFAULT_INDEX_TYPE = "range";
 
-  @RequestMapping(method = {RequestMethod.GET, RequestMethod.POST}, value = "/management/commands")
+  @RequestMapping(method = {RequestMethod.POST}, value = "/management/commands")
   public ResponseEntity<InputStreamResource> command(@RequestParam(value = "cmd") String command,
       @RequestParam(value = "resources", required = false) MultipartFile[] fileResource)
       throws IOException {