[jboss-jira] [JBoss JIRA] (WFCORE-4120) It is possible add modules as extensions when they are not really an extension

Yeray Borges (JIRA) issues at jboss.org
Thu Sep 20 11:14:00 EDT 2018


Yeray Borges created WFCORE-4120:
------------------------------------

             Summary: It is possible add modules as extensions when they are not really an extension
                 Key: WFCORE-4120
                 URL: https://issues.jboss.org/browse/WFCORE-4120
             Project: WildFly Core
          Issue Type: Bug
          Components: Management
    Affects Versions: 7.0.0.Alpha1
            Reporter: Yeray Borges
            Assignee: Yeray Borges
            Priority: Minor


The {{ExtensionAddHandler}} is not checking that the module that is being added as extension really has an Extension service. 

That means we can do odd things like:
{{domain at localhost:9990 /] /extension=io.netty:add}}

This operation completes successfully and io.netty is added to the extensions section in the configuration files, which is incorrect.




--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list