Uploaded image for project: 'ActiveMQ'
  1. ActiveMQ
  2. AMQ-7007

Limit the jetty endpoint to localhost by default (web console/jolokia)

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 5.15.0
    • Fix Version/s: 5.16.0
    • Component/s: Web Console
    • Labels:
      None

      Description

      In order to reduce the exposed surface area of the broker it makes sense to limit the http endpoint to localhost by default.

      The default jetty.xml configuration will reference 127.0.0.1 to make this explicit.

       

        Attachments

          Activity

            People

            • Assignee:
              gtully Gary Tully
              Reporter:
              gtully Gary Tully
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: