`

Class loading and update detection

 
阅读更多
Background
Application shall not enable class reloading feature, which allows the modules reloading without further authentication in Prod Env, violates ISR’s security guideline.
 
Diagnosis
It can be identified by checking the config file: ibm-web-ext.xmi
If reloadingEabled = “true” and reloadInterval is not equal to zero, the class reloading feature is ON
 
Fix
1.     Update ibm-web-ext.xmi
a.     set reloadingEabled to “false”
b.     set reloadInterval to “0”
2.     Redeploy the EAR
 
 
分享到:
评论

相关推荐

Global site tag (gtag.js) - Google Analytics