[KNOX-1106] Tighten the rewrite rule on oozieui to reduce false positives

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 0.14.0
• Fix Version/s: 0.14.0
• Component/s: Server
• Flags: Patch
• Assignee: Wei Han
• Reporter: Wei Han
• Created: 03/Nov/17 21:27
• Updated: 28/Mar/19 14:07
• Resolved: 06/Nov/17 16:30

Description

Currently oozieui rule will match uri with any scheme, which sometimes could cause false positives. For example the following rule in oozieui will rewrite viewfs://ns-default/foo/bar/oozie/myfile.jar to http://oozie:11000/oozie/myfile.jar

<rule dir="IN" name="OOZIEUI/oozie/inbound/root" pattern="://:/*/oozie/">
<rewrite template="{$serviceUrl[OOZIEUI]}/"/>
</rule>

The attached patch will tighten the rule to match only http and https schemes.

Issue Links

• is cloned by: KNOX-1177 Retighten the rewrite rule on oozieui to reduce false positives