Merge pull request #496 from coheigea/AMQ-7434

AMQ-7434 - Enable Jolokia CORS strict-checking by default
This commit is contained in:
Jean-Baptiste Onofré 2020-03-03 15:48:03 +01:00 committed by GitHub
commit f7c49d54e8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions

View File

@ -17,6 +17,11 @@
-->
<restrict>
<!-- Enforce that an Origin/Referer header is present to prevent CSRF -->
<cors>
<strict-checking/>
</cors>
<!-- deny calling operations or getting attributes from these mbeans -->
<deny>
<mbean>