AlbumenJ commented on issue #13197: URL: https://github.com/apache/dubbo/issues/13197#issuecomment-1761232459
> * [x] I have searched the [issues](https://github.com/apache/dubbo/issues) of this repository and believe that this is not a duplicate. > > ## Ask your question here > If I turn on QOS, I can execute the invoke command through telnet. I want to turn off the invoke command when QOS is turned on. Because the invoke command can bypass dubbo's security check mechanism(such as TokenFilter), the dubbo service method is directly called, and there is a security problem. QoS command can only be called in localhost by default. If you think localhost is also dangerous, pls disable qos. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
