[AMQ-7007] Limit the jetty endpoint to localhost by default (web console/jolokia)

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.15.0
• Fix Version/s: 5.16.0
• Component/s: Web Console
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 04/Jul/18 10:36
• Updated: 04/Jul/18 10:42
• Resolved: 04/Jul/18 10:40

Description

In order to reduce the exposed surface area of the broker it makes sense to limit the http endpoint to localhost by default.

The default jetty.xml configuration will reference 127.0.0.1 to make this explicit.