Hi team,

We received serval security issues report in ShardingSphere ElasticJob-UI.

As you know, The ShardingSphere ElasticJob-UI is for LAN only. We may not
need to care about the security issue here.
The UI is an optional tool, all ShardingSphere committers are
backend background, they are not familiar with frontend.

Some security teams only care about CVE as their result, but do not care
about the real usage. It really trouble us.

The team wants to spend time on more meaningful things, so I want to
discuss the necessity of ShardingSphere ElasticJob-UI. It looks like we'd
better to remove it from ShardingSphere ElasticJob,

What do you think?

------------------

Sincerely,
Liang Zhang (John)
Apache ShardingSphere

Reply via email to