• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

Json on url

 
Ranch Hand
Posts: 38
  • Number of slices to send:
    Optional 'thank-you' note:
Hello, i found out something strange with my application. I have different classes like "Article", "Category" or "Blogger" for example.
When i type an url like :
http://localhost:8080/categories/4
http://localhost:8080/articles/7
http://localhost:8080/bloggers

It works while it shouldn't.

I have json informations on my page. It is strange because i normaly don't have json and rest in my application. And the worst is it give out private informations.  
Where does it come from ?
 
Saloon Keeper
Posts: 27871
196
  • 1
  • Number of slices to send:
    Optional 'thank-you' note:
There is absolutely no way for us to tell. It's possible that you have another server running at port 8080 and you're actually talking to that server, not the one you think you're talking to, since only one application can listen to a port on a given host.

Alternatively there's logic in your webapp that you're not aware of that processes those URLs. And I note that you are working from the root context, so for a Tomcat server, that would be whatever is in TOMCAT_HOME/webapps/ROOT, which by default contains the Tomcat webapp administration webapp.
 
Fabien Dupuit
Ranch Hand
Posts: 38
  • Number of slices to send:
    Optional 'thank-you' note:

Tim Holloway wrote:There is absolutely no way for us to tell. It's possible that you have another server running at port 8080 and you're actually talking to that server, not the one you think you're talking to, since only one application can listen to a port on a given host.

Alternatively there's logic in your webapp that you're not aware of that processes those URLs. And I note that you are working from the root context, so for a Tomcat server, that would be whatever is in TOMCAT_HOME/webapps/ROOT, which by default contains the Tomcat webapp administration webapp.



Hello, i think it may be java spring magic ... I only have my webapp at 8080 port (tomcat).
I think it may go away as soon as it will go live.
 
Tim Holloway
Saloon Keeper
Posts: 27871
196
  • 1
  • Number of slices to send:
    Optional 'thank-you' note:
Sping isn't THAT magical. There's logic somewhere doing that.
 
Marshal
Posts: 4533
572
  • 2
  • Number of slices to send:
    Optional 'thank-you' note:

Fabien Dupuit wrote:... I think it may go away as soon as it will go live.


I would never go live with a service/system which I suspected was leaking sensitive information.
 
Fabien Dupuit
Ranch Hand
Posts: 38
  • Number of slices to send:
    Optional 'thank-you' note:
I will try to find out what is causing it.
 
Fabien Dupuit
Ranch Hand
Posts: 38
  • Number of slices to send:
    Optional 'thank-you' note:
Little update. It seems that adding "@RepositoryRestResource(exported = false)" on my DAO classes solve the problem.
Apparently, Spring Data JPA create end point automatically.
 
Saloon Keeper
Posts: 15625
366
  • 1
  • Number of slices to send:
    Optional 'thank-you' note:
Spring Data JPA does no such thing.

It appears you have added Spring Data REST to your application. Why did you do this, if you don't want to make REST resources out of your data entities?
 
Fabien Dupuit
Ranch Hand
Posts: 38
  • 1
  • Number of slices to send:
    Optional 'thank-you' note:

Stephan van Hulst wrote:Spring Data JPA does no such thing.

It appears you have added Spring Data REST to your application. Why did you do this, if you don't want to make REST resources out of your data entities?



You're right. I removed it from gradle, made a few change and now i don't need this line of code on my daos anymore
 
With a little knowledge, a cast iron skillet is non-stick and lasts a lifetime.
reply
    Bookmark Topic Watch Topic
  • New Topic
vceplus-200-125    | boson-200-125    | training-cissp    | actualtests-cissp    | techexams-cissp    | gratisexams-300-075    | pearsonitcertification-210-260    | examsboost-210-260    | examsforall-210-260    | dumps4free-210-260    | reddit-210-260    | cisexams-352-001    | itexamfox-352-001    | passguaranteed-352-001    | passeasily-352-001    | freeccnastudyguide-200-120    | gocertify-200-120    | passcerty-200-120    | certifyguide-70-980    | dumpscollection-70-980    | examcollection-70-534    | cbtnuggets-210-065    | examfiles-400-051    | passitdump-400-051    | pearsonitcertification-70-462    | anderseide-70-347    | thomas-70-533    | research-1V0-605    | topix-102-400    | certdepot-EX200    | pearsonit-640-916    | itproguru-70-533    | reddit-100-105    | channel9-70-346    | anderseide-70-346    | theiia-IIA-CIA-PART3    | certificationHP-hp0-s41    | pearsonitcertification-640-916    | anderMicrosoft-70-534    | cathMicrosoft-70-462    | examcollection-cca-500    | techexams-gcih    | mslearn-70-346    | measureup-70-486    | pass4sure-hp0-s41    | iiba-640-916    | itsecurity-sscp    | cbtnuggets-300-320    | blogged-70-486    | pass4sure-IIA-CIA-PART1    | cbtnuggets-100-101    | developerhandbook-70-486    | lpicisco-101    | mylearn-1V0-605    | tomsitpro-cism    | gnosis-101    | channel9Mic-70-534    | ipass-IIA-CIA-PART1    | forcerts-70-417    | tests-sy0-401    | ipasstheciaexam-IIA-CIA-PART3    | mostcisco-300-135    | buildazure-70-533    | cloudera-cca-500    | pdf4cert-2v0-621    | f5cisco-101    | gocertify-1z0-062    | quora-640-916    | micrcosoft-70-480    | brain2pass-70-417    | examcompass-sy0-401    | global-EX200    | iassc-ICGB    | vceplus-300-115    | quizlet-810-403    | cbtnuggets-70-697    | educationOracle-1Z0-434    | channel9-70-534    | officialcerts-400-051    | examsboost-IIA-CIA-PART1    | networktut-300-135    | teststarter-300-206    | pluralsight-70-486    | coding-70-486    | freeccna-100-101    | digitaltut-300-101    | iiba-CBAP    | virtuallymikebrown-640-916    | isaca-cism    | whizlabs-pmp    | techexams-70-980    | ciscopress-300-115    | techtarget-cism    | pearsonitcertification-300-070    | testking-2v0-621    | isacaNew-cism    | simplilearn-pmi-rmp    | simplilearn-pmp    | educationOracle-1z0-809    | education-1z0-809    | teachertube-1Z0-434    | villanovau-CBAP    | quora-300-206    | certifyguide-300-208    | cbtnuggets-100-105    | flydumps-70-417    | gratisexams-1V0-605    | ituonline-1z0-062    | techexams-cas-002    | simplilearn-70-534    | pluralsight-70-697    | theiia-IIA-CIA-PART1    | itexamtips-400-051    | pearsonitcertification-EX200    | pluralsight-70-480    | learn-hp0-s42    | giac-gpen    | mindhub-102-400    | coursesmsu-CBAP    | examsforall-2v0-621    | developerhandbook-70-487    | root-EX200    | coderanch-1z0-809    | getfreedumps-1z0-062    | comptia-cas-002    | quora-1z0-809    | boson-300-135    | killtest-2v0-621    | learncia-IIA-CIA-PART3    | computer-gcih    | universitycloudera-cca-500    | itexamrun-70-410    | certificationHPv2-hp0-s41    | certskills-100-105    | skipitnow-70-417    | gocertify-sy0-401    | prep4sure-70-417    | simplilearn-cisa    |
http://www.pmsas.pr.gov.br/wp-content/    | http://www.pmsas.pr.gov.br/wp-content/    |