[
https://issues.apache.org/jira/browse/ISIS-2626?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17337206#comment-17337206
]
ASF subversion and git services commented on ISIS-2626:
-------------------------------------------------------
Commit fa7fa1088ca20f267d5728c21fda3b4e57758d0b in isis's branch
refs/heads/master from [email protected]
[ https://gitbox.apache.org/repos/asf?p=isis.git;h=fa7fa10 ]
ISIS-2626: SpecLoader: provide a side-effect free MM validation version
> Do not serve HTTP requests until the Application is fully initialized.
> ----------------------------------------------------------------------
>
> Key: ISIS-2626
> URL: https://issues.apache.org/jira/browse/ISIS-2626
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Reporter: Andi Huber
> Assignee: Andi Huber
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> That's currently a denial of service vector, as HTTP requests that happen too
> early during bootstrapping have the side effect of triggering meta-model
> validation too early, which leaves the application in an unusable state. As
> meta-model validation, while yet only partly inspected, will most likely lead
> to a validation failure that renders the application permanently broken until
> restarted.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
