[HBASE-20406] HBase Thrift HTTP - Shouldn't handle TRACE/OPTIONS methods - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.0.0-alpha-1, 2.1.0, 1.5.0
Component/s: security, Thrift
Labels:
None

Hadoop Flags:

Incompatible change
Release Note:

Hide

When configured to do thrift-over-http, the HBase Thrift API Server no longer accepts the HTTP methods TRACE nor OPTIONS.

Show
 When configured to do thrift-over-http, the HBase Thrift API Server no longer accepts the HTTP methods TRACE nor OPTIONS.

Description

~~HBASE-10473~~ introduced a utility HttpServerUtil.constrainHttpMethods to prevent Jetty from answering on TRACE and OPTIONS methods. This should be added to Thrift in HTTP mode as well.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

HBASE-20406.master.001.patch
13/Apr/18 02:08
2 kB
Kevin Risden
HBASE-20406.master.002.patch
15/Apr/18 18:03
5 kB
Kevin Risden

Issue Links

links to

Review Board (master)

Activity

People

Assignee:: Kevin Risden

Reporter:: Kevin Risden

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Dates

Created:: 13/Apr/18 01:33

Updated:: 21/Apr/18 12:35

Resolved:: 20/Apr/18 20:44