Tapestry
  1. Tapestry
  2. TAPESTRY-2489

The ServiceStatus page should not reveal so much information in production mode, out of security concerns

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Trivial Trivial
    • Resolution: Fixed
    • Affects Version/s: 5.0.13
    • Fix Version/s: 5.0.15
    • Component/s: None
    • Labels:
      None

      Description

      Currently T5 apps are exposing all internal services via

      {context}

      /servicestatus url. This should not be default in production mode.

        Activity

        Christian Gorbach created issue -
        Christian Gorbach made changes -
        Field Original Value New Value
        Summary Services Status Page be exposed in Production Mode Services Status Page exposed in Production Mode
        Howard M. Lewis Ship made changes -
        Assignee Howard M. Lewis Ship [ hlship ]
        Howard M. Lewis Ship made changes -
        Status Open [ 1 ] In Progress [ 3 ]
        Howard M. Lewis Ship made changes -
        Summary Services Status Page exposed in Production Mode The ServiceStatus page should not reveal so much information in production mode, out of security concerns
        Howard M. Lewis Ship made changes -
        Resolution Fixed [ 1 ]
        Status In Progress [ 3 ] Closed [ 6 ]
        Fix Version/s 5.0.15 [ 12313350 ]
        Mark Thomas made changes -
        Workflow jira [ 12434228 ] Default workflow, editable Closed status [ 12569337 ]
        Mark Thomas made changes -
        Workflow Default workflow, editable Closed status [ 12569337 ] jira [ 12590594 ]

          People

          • Assignee:
            Howard M. Lewis Ship
            Reporter:
            Christian Gorbach
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development