Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-10579

HDFS web interfaces lack configs for X-FRAME-OPTIONS protection

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.0-alpha1
    • Fix Version/s: 2.8.0, 3.0.0-alpha1
    • Component/s: datanode, namenode
    • Labels:
      None
    • Target Version/s:

      Description

      This JIRA proposes to extend the work done in HADOOP-12964 and enable a configuration value that enables or disables that option.

      This allows HDFS to remain backward compatible as required by the branch-2.

        Attachments

        1. HDFS-10579.001.patch
          23 kB
          Anu Engineer
        2. HDFS-10579.002.patch
          23 kB
          Anu Engineer
        3. HDFS-10579.003.patch
          13 kB
          Anu Engineer

          Issue Links

          Dependent

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-13352 Make X-FRAME-OPTIONS configurable in HttpServer2

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-12964 Http server vulnerable to clickjacking

          • Major - Major loss of function.
          • Resolved
          relates to

          New Feature - A new feature of the product, which has yet to be developed. HADOOP-13008 Add XFS Filter for UIs to Hadoop Common

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                aengineer Anu Engineer
                Reporter:
                aengineer Anu Engineer
              • Votes:
                1 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: