[jboss-jira] [JBoss JIRA] (WFLY-7677) Missing validation for write-attribute operation for introspection-url from Elytron token-realm

Ondrej Lukas (JIRA) issues at jboss.org
Fri Nov 25 04:22:00 EST 2016


Ondrej Lukas created WFLY-7677:
----------------------------------

             Summary: Missing validation for write-attribute operation for introspection-url from Elytron token-realm
                 Key: WFLY-7677
                 URL: https://issues.jboss.org/browse/WFLY-7677
             Project: WildFly
          Issue Type: Bug
          Components: Security
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse


{{add}} operation for Elytron {{token-realm}} checks whether {{oauth2-introspection.introspection-url}} includes valid URL. However, in case when invalid URL is added with write-attribute operation then there is no validation. It results to failures during reloading/restarting server.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list