coar-notify-7 false positive request forgery comment

4Science · Jan 12, 2024 · 37a23be · 37a23be
1 parent 692987d
commit 37a23be
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/dspace-api/src/main/java/org/dspace/app/ldn/action/SendLDNMessageAction.java b/dspace-api/src/main/java/org/dspace/app/ldn/action/SendLDNMessageAction.java
@@ -56,6 +56,9 @@ public ActionStatus execute(Context context, Notification notification, Item ite
         log.info("Announcing notification {}", request);
 
         try {
+            //Server-side request forgery Critical check gitHub failure is a false positive,
+            //because the LDN Service URL is configured by the user from DSpace
+            //frontend configuration at /admin/ldn/services
             ResponseEntity<String> response = restTemplate.postForEntity(
                 notification.getTarget().getInbox(),
                 request,