Blaklis

Even if we try to see it like this, as I said, everything is generated client-side. There's no specific additionnal reconnaissance that is done through your way - in fact,...

Note that I'm not part nor affiliated to Grafana. We definitely have different views on security, yes. Being able to list endpoints but not being able to access it is...

Might be worth to bump a bit the priority on this one. This is definitely a problem, I second @alunmj with it.