Uploaded image for project: 'Application Server 7'
  1. Application Server 7
  2. AS7-2400

Prevention of CSRF reqeusts being accepted and disabling cross-origin resource sharing for the HTTP interface

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Blocker
    • 7.0.2.SP1, 7.1.0.Beta1
    • None
    • None
    • None

    Attachments

      Issue Links

        is blocked by

        Bug - A problem that impairs or prevents the functions of the product. AS7-2454 Content-Type Omitted from HTTP request to add deployment

        • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
        • Resolved

        Task - Represents a small unit of work that is not end-user facing. AS7-2509 Upgrade to version of console to include AS7-2454

        • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
        • Resolved
        is duplicated by

        Bug - A problem that impairs or prevents the functions of the product. AS7-2383 Implement CSRF Protection for HTTP Interface

        • Critical - To be worked on immediately following BLOCKER issues.
        • Resolved
        relates to

        Task - Represents a small unit of work that is not end-user facing. AS7-2564 Allow genuine cross-origin resource sharing requests for domain management

        • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
        • Resolved

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            darran.lofthouse@redhat.com Darran Lofthouse
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: