This is an automated email from the ASF dual-hosted git repository.

jinwoo pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/geode.git


The following commit(s) were added to refs/heads/develop by this push:
     new c8f9fd6e35 Disallow GET requests to /management/commands endpoint 
(#7910)
c8f9fd6e35 is described below

commit c8f9fd6e35efbdad900e13fb89fedba0ade79ddf
Author: wmh1108-sas <[email protected]>
AuthorDate: Thu Aug 28 04:59:35 2025 -0400

    Disallow GET requests to /management/commands endpoint (#7910)
    
    * Disallow GET requests to /management/commands endpoint
---
 .../management/internal/web/controllers/ShellCommandsController.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
 
b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
index dc7a8f0ced..3bc43a48e8 100644
--- 
a/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
+++ 
b/geode-web/src/main/java/org/apache/geode/management/internal/web/controllers/ShellCommandsController.java
@@ -79,7 +79,7 @@ public class ShellCommandsController extends 
AbstractCommandsController {
 
   private static final String DEFAULT_INDEX_TYPE = "range";
 
-  @RequestMapping(method = {RequestMethod.GET, RequestMethod.POST}, value = 
"/management/commands")
+  @RequestMapping(method = {RequestMethod.POST}, value = 
"/management/commands")
   public ResponseEntity<InputStreamResource> command(@RequestParam(value = 
"cmd") String command,
       @RequestParam(value = "resources", required = false) MultipartFile[] 
fileResource)
       throws IOException {

Reply via email to