[jbosstools-issues] [JBoss JIRA] (JBIDE-26088) arbitrary folder should not be able to be searched for runtimes

[Jeff MAURY (Jira)]

     [ https://issues.jboss.org/browse/JBIDE-26088?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jeff MAURY updated JBIDE-26088:
-------------------------------
    Fix Version/s: 4.11.x


> arbitrary folder should not be able to be searched for runtimes
> ---------------------------------------------------------------
>
>                 Key: JBIDE-26088
>                 URL: https://issues.jboss.org/browse/JBIDE-26088
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: runtime-server-protocol
>            Reporter: Rob Stryker
>            Assignee: Rob Stryker
>            Priority: Major
>             Fix For: 4.11.x
>
>
> Server currently has following interface / json entry point:
> CompletableFuture<List<ServerBean>> findServerBeans(DiscoveryPath path);
> However, any arbitrary system path can be searched this way. It'd be better if any discovery path had to be kept in the model via addDiscoveryPath first, to ensure that the server isn't somehow restricted from searching various paths. 
> Of course right now there's no API or configuration file to actually restrict scanning various folders, but I would imagine that eventually such restrictions would be made such that the void addDiscoveryPath(DiscoveryPath path); entrypoint could restrict or reject additions. 
> I believe [~dgolovin] disagrees with this approach. Please discuss. 



--
This message was sent by Atlassian Jira
(v7.12.1#712002)