[ https://issues.apache.org/jira/browse/ARIES-2123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Amichai Rothman resolved ARIES-2123. ------------------------------------ Fix Version/s: rsa-2.0.0 Resolution: Fixed > TCP Provider allows invoking arbitrary methods on the service object > -------------------------------------------------------------------- > > Key: ARIES-2123 > URL: https://issues.apache.org/jira/browse/ARIES-2123 > Project: Aries > Issue Type: Bug > Components: Remote Service Admin > Affects Versions: rsa-1.16.1 > Reporter: Amichai Rothman > Priority: Major > Fix For: rsa-2.0.0 > > > The TCP Provider method invoker invokes any method on the service object. It > should restrict invocations only to methods that are declared in the exported > interfaces, and prevent invocation of other implementation/private methods > that are not explicitly exported. -- This message was sent by Atlassian Jira (v8.20.10#820010)