You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, SaltClient.startCommand sets fixed lowstate data sent towards API, which limits the usage in certain way.
Following usecase specifies the needs for this.
As Job cache method prep_jid can accept passed_jid via lowstate data, users / systems might be able to craft custom JID before actual job execution, thus bypassing several race conditions when JID wasn't known prior to actual execution.
The text was updated successfully, but these errors were encountered:
Currently,
SaltClient.startCommand
sets fixed lowstate data sent towards API, which limits the usage in certain way.Following usecase specifies the needs for this.
As Job cache method prep_jid can accept
passed_jid
via lowstate data, users / systems might be able to craft custom JID before actual job execution, thus bypassing several race conditions when JID wasn't known prior to actual execution.The text was updated successfully, but these errors were encountered: