Andi Huber created ISIS-2626:
--------------------------------

             Summary: Do not serve HTTP requests until the Application is fully 
initialized.
                 Key: ISIS-2626
                 URL: https://issues.apache.org/jira/browse/ISIS-2626
             Project: Isis
          Issue Type: Improvement
            Reporter: Andi Huber


That's currently a denial of service vector, as HTTP requests that happen too 
early during bootstrapping have the side effect of triggering meta-model 
validation too early, which leaves the application in an unusable state, as 
meta-model validation while yet only partly inspected while most likely lead to 
a validation failure.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to