1. 05 Nov, 2013 4 commits
  2. 04 Nov, 2013 21 commits
  3. 02 Nov, 2013 4 commits
  4. 01 Nov, 2013 10 commits
  5. 31 Oct, 2013 1 commit
    • Dave Syer's avatar
      Explicitly disable security on management endpoints if requested · 63a2d067
      Dave Syer authored
      Previously the management endpoint filter was applied to all requests
      if the user had disabled security.management.enabled, but since it
      had no security applied it was letting all requests through.
      
      The fix was to explicitly exclude the whole enclosing configuration
      and carefully ignore the management endpoints in the normal security
      chain.
      
      Fixes gh-100.
      63a2d067