Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix WoT action validation was only done for application/json content-type #2102

Merged

Conversation

thjaeckle
Copy link
Member

@thjaeckle thjaeckle commented Jan 21, 2025

This allowed bypassing of WoT validation for actions - e.g. by defining another content-type than application/json

@thjaeckle thjaeckle added the bug label Jan 21, 2025
@thjaeckle thjaeckle added this to the 3.6.10 milestone Jan 21, 2025
@thjaeckle thjaeckle self-assigned this Jan 21, 2025
@thjaeckle thjaeckle force-pushed the bugfix/wot-action-validation branch from 0bf8305 to 251034b Compare January 21, 2025 15:55
* in order to check if validation is even enabled for a given message before making sure it is in JSON
@alstanchev alstanchev self-requested a review January 23, 2025 14:53
Copy link
Contributor

@alstanchev alstanchev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@thjaeckle thjaeckle merged commit 8380910 into eclipse-ditto:master Jan 23, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

None yet

2 participants