Michael MullerandGitHub 29bf0f3965 Make BiqueryPollJobAction endpoint internal only (#955) ...

* Make BiqueryPollJobAction endpoint internal only

This endpoint makes use of java object deserialization, which allows a
malicious actor to craft a request that can initiate overly broad actions on
the server.  Since this endpoint is not widely used for operational purposes,
limit its authorization to "internal only" so that no user agents (even with
admin privs) can access it.

2021-02-05 07:50:51 -05:00

..

google/registry

Make BiqueryPollJobAction endpoint internal only (#955)

2021-02-05 07:50:51 -05:00