tyrus
tyrus copied to clipboard
TyrusSession should cancel the IdleTimeoutFuture in cleanAfterClose
Currently if a session is closed the idleTimeoutFuture is not cancelled. This can lead to a build up of uncancelled tasks in the ManagedScheduledExecutorService which can cause memory exhaustion and is a potential DDOS attack route see https://github.com/payara/Payara/issues/2564