Skip to content

sentinel-transport-common HTTP security | sentinel-transport-common模块暴露的http接口没有访问验证,是否存在安全隐患问题 #2578

@hezhaoye

Description

@hezhaoye

Java服务在外网使用中,sentinel-transport-common模块暴露的http接口没有访问验证,是否存在安全隐患问题,例如攻击者直接通过构造请求调用修改限流规则?

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/questionCategory issues related to questions or problems

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions