[jboss-dev-forums] [Design of JBoss jBPM] - Re: security in the console

[david.lloyd@jboss.com]

"tom.baeyens at jboss.com" wrote : i also removed the comments in the web.xml about the security warning around the gpd deployment servlet.  that should be in the documentation, i think.

Fine, we can put it in the documentation - but we should also put it back in the web.xml.  It does no harm being there, and it is an important indication that there is a security issue.  Which there is.  With security, you can not have too many warnings.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054794#4054794

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054794