[jboss-jira] [JBoss JIRA] (WFCORE-1777) Use separate resources for GET requests involving useStreamAsResponse

Brian Stansberry (JIRA) issues at jboss.org
Thu Oct 27 09:41:00 EDT 2016


     [ https://issues.jboss.org/browse/WFCORE-1777?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Stansberry updated WFCORE-1777:
-------------------------------------
    Security Sensitive Issue: This issue is security relevant


> Use separate resources for GET requests involving useStreamAsResponse
> ---------------------------------------------------------------------
>
>                 Key: WFCORE-1777
>                 URL: https://issues.jboss.org/browse/WFCORE-1777
>             Project: WildFly Core
>          Issue Type: Enhancement
>          Components: Domain Management
>            Reporter: Brian Stansberry
>            Assignee: Brian Stansberry
>             Fix For: 3.0.0.CR1
>
>
> A request for streamed content can potentially involve a large amount of content, e.g. a very large log file. We should limit the amount of resources (e.g. threads) available for handling such HTTP requests over the /management context, particularly in the case of GET requests where we don't do the cross-origin checks that  we do with POST.



--
This message was sent by Atlassian JIRA
(v7.2.2#72004)


More information about the jboss-jira mailing list