You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@isis.apache.org by "Andi Huber (Jira)" <ji...@apache.org> on 2021/04/26 11:51:00 UTC

[jira] [Updated] (ISIS-2626) Do not serve HTTP requests until the Application is fully initialized.

     [ https://issues.apache.org/jira/browse/ISIS-2626?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andi Huber updated ISIS-2626:
-----------------------------
    Component/s: Isis Core

> Do not serve HTTP requests until the Application is fully initialized.
> ----------------------------------------------------------------------
>
>                 Key: ISIS-2626
>                 URL: https://issues.apache.org/jira/browse/ISIS-2626
>             Project: Isis
>          Issue Type: Improvement
>          Components: Isis Core
>            Reporter: Andi Huber
>            Assignee: Andi Huber
>            Priority: Major
>             Fix For: 2.0.0-M6
>
>
> That's currently a denial of service vector, as HTTP requests that happen too early during bootstrapping have the side effect of triggering meta-model validation too early, which leaves the application in an unusable state, as meta-model validation while yet only partly inspected while most likely lead to a validation failure.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)