Merge pull request #496 from coheigea/AMQ-7434

AMQ-7434 - Enable Jolokia CORS strict-checking by default
This commit is contained in:
Jean-Baptiste Onofré 2020-03-03 15:48:03 +01:00 committed by GitHub
commit f7c49d54e8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions

View File

@ -17,6 +17,11 @@
--> -->
<restrict> <restrict>
<!-- Enforce that an Origin/Referer header is present to prevent CSRF -->
<cors>
<strict-checking/>
</cors>
<!-- deny calling operations or getting attributes from these mbeans --> <!-- deny calling operations or getting attributes from these mbeans -->
<deny> <deny>
<mbean> <mbean>
@ -31,4 +36,4 @@
</mbean> </mbean>
</deny> </deny>
</restrict> </restrict>