[jboss-as7-dev] Request for review of DomainServletApi bridge

Remy Maucherat rmaucher at redhat.com
Thu Jun 9 06:29:59 EDT 2011


On Wed, 2011-06-08 at 21:01 +0100, Darran Lofthouse wrote:
> What is the intended use of this servlet?
> 
> One of the ongoing problems that JBoss AS has had as long as there has 
> been a management component made available over the JBoss Web / Tomcat 
> connector is that end users will expose that over the internet unsecured.

I understand there are requirements, but I also share your concern this
is a significant step backwards for security.

-- 
Remy Maucherat <rmaucher at redhat.com>
Red Hat Inc



More information about the jboss-as7-dev mailing list