Remove App.addWhiteListEntry() since it allows runtime code to override build 
time settings
-------------------------------------------------------------------------------------------

                 Key: CB-23
                 URL: https://issues.apache.org/jira/browse/CB-23
             Project: Apache Callback
          Issue Type: Bug
            Reporter: Dave Charles Johnson


This is probably a security problem since the whole idea of the whitelist is to 
prevent runtime code from accessing a domain unless it's in the whitelist.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to