markobean commented on PR #8548:
URL: https://github.com/apache/nifi/pull/8548#issuecomment-2022717954
Thanks @exceptionfactory for the merge and @dan-s1 for the review.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use
exceptionfactory closed pull request #8548: NIFI-12925 disallow TRACE and
OPTIONS methods in ListenHTTP
URL: https://github.com/apache/nifi/pull/8548
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to
markobean commented on PR #8548:
URL: https://github.com/apache/nifi/pull/8548#issuecomment-2015974533
> @markobean Changes should also be made to `ListenHttp` documentation on
lines 84-85 to indicate what TRACE, OPTIONS and CONNECT will return.
Documentation updated.
--
This is an
dan-s1 commented on PR #8548:
URL: https://github.com/apache/nifi/pull/8548#issuecomment-2015871331
@markobean Changes should also be made to `ListenHttp` documentation on
lines 84-85 to indicate what TRACE and OPTIONS will return.
--
This is an automated message from the Apache Git Servi
markobean commented on PR #8548:
URL: https://github.com/apache/nifi/pull/8548#issuecomment-2015850430
Please apply this commit to the nifi-1.x branch as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL ab
dan-s1 commented on code in PR #8548:
URL: https://github.com/apache/nifi/pull/8548#discussion_r1536061304
##
nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/servlets/ListenHTTPServlet.java:
##
@@ -157,6 +157,21 @@
markobean opened a new pull request, #8548:
URL: https://github.com/apache/nifi/pull/8548
# Summary
Updates ListenHTTP to disallow TRACE and OPTIONS requests. Any such requests
will be sent a 405 response.
[NIFI-12925](https:/
