Feature #6
Security issue when sharing a list of property files
| Status : | New | Start : | 04/13/2008 | |
| Priority : | Normal | Due date : | ||
| Assigned to : | Kaare Nilsen | % Done : | 0% |
|
| Category : | Code | Spent time : | - | |
| Target version : | 1.2 | Estimated time : | 0.00 hours | |
Description
When using the staged approach, properties for all stages are made available to all beans that needs the "property-object". This means that e.g. usernames and passwords for all resources are exposed. "Inactive" properties, i.e. properties for a stage not currently active, should not be made available.
Related issues