Details
-
Suggestion
-
Resolution: Fixed
-
None
-
None
-
None
Description
We should have a hard timeout for any external HTTP requests made by Confluence (i.e. for jiraissues or RSS macros) Currently there's the possibility of DOS-ing a Confluence server by pointing it at a broken website. (See CONF-2127)
HTTP requests should be spawned in a separate thread, using wait/notify to tell the original thread when a result is available, with a reasonable timeout. (Is there something in Concurrent that will do this for us?)
Attachments
Issue Links
- incorporates
-
CONFSERVER-2127 A page containing the rss-macro is not displayed if the requested rss-feed is "down"
- Closed
- relates to
-
CONFSERVER-6248 Prevent outbound HTTP connections during page rendering monopolising database connections
- Closed
-
CONFSERVER-6697 Allow configuration of timeouts for any http request made by Confluence
- Closed