[jboss-jira] [JBoss JIRA] (WFLY-705) Implement a User Agent and Remote Address Filter for the HTTP Management Interface

[Andre Dietisheim (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12931745#comment-12931745 ] 

Andre Dietisheim commented on WFLY-705:
---------------------------------------

RFC 2616 states (http://www.ietf.org/rfc/rfc2616.txt, "14.43 User-Agent")
{quote}
 User agents SHOULD include this field with requests.
{quote}
Thus imho not having a user-agent is perfectly valid, it's not mandatory to have it.  Stuart merged my patch.
                
> Implement a User Agent and Remote Address Filter for the HTTP Management Interface
> ----------------------------------------------------------------------------------
>
>                 Key: WFLY-705
>                 URL: https://issues.jboss.org/browse/WFLY-705
>             Project: WildFly
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Domain Management, Security
>            Reporter: Darran Lofthouse
>            Assignee: Andre Dietisheim
>             Fix For: Awaiting Volunteers
>
>
> The HTTP Management interface provides access to manage the domain model, this interface is partly dependent on the protection supplied by an end users web browser.
> This feature request is to optionally filter inbound requests based on a configurable list of supported user agents and or remote addresses - this will mean buggy browser versions can be excluded and remote clients restricted.
> Anyone interested in contributing please feel free to ping darranl in #jboss-as7.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira