[HBASE-20406] HBase Thrift HTTP - Shouldn't handle TRACE/OPTIONS methods - ASF JIRA

Log work

Agile Board

Rank to Top

Rank to Bottom

Attach files

Attach Screenshot

Bulk Copy Attachments

Bulk Move Attachments

Voters

Watch issue

Watchers

Create sub-task

Convert to sub-task

Move

Link

Clone

Labels

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.0.0-alpha-1, 2.1.0, 1.5.0
Component/s: security, Thrift
Labels:
None

Hadoop Flags:

Incompatible change
Release Note:

Hide

When configured to do thrift-over-http, the HBase Thrift API Server no longer accepts the HTTP methods TRACE nor OPTIONS.

Show
 When configured to do thrift-over-http, the HBase Thrift API Server no longer accepts the HTTP methods TRACE nor OPTIONS.

Description

~~HBASE-10473~~ introduced a utility HttpServerUtil.constrainHttpMethods to prevent Jetty from answering on TRACE and OPTIONS methods. This should be added to Thrift in HTTP mode as well.