-
Notifications
You must be signed in to change notification settings - Fork 268
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
remove stats as default #616
Conversation
Can this be merged. It is indeed a bad practice to enable stats on every frontend by default. |
any update on this ? |
Maybe @skyamgarp can help ? |
@elfranne could you please fix the failing specs & squash the commits later? |
let's see if the tests works this time. |
This is a security issue. By default this module opens stats to the whole public, and the option can be just set to |
You can always add stats where you want with authentication, I just don't want to be enabled as default everywhere. |
Since the new merge_options parameter defaults to true, every single installation that decided to use custom options to disable 'stats enabled' will get it automatically back as side effect. |
PF-3525 : pdk update for module (CAT-2101) Add support for Debian-12 (CAT-2101) test comit (CAT-2101) test commit (CAT-2158) Upgrade rexml to address CVE-2024-49761 remove stats from checks
Fix for #590
This is not a default parameter from Haproxy, and is bad practice to open up stats to all.
This is also not enabled on BSD.