Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-10579

HDFS web interfaces lack configs for X-FRAME-OPTIONS protection

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.0.0-alpha1
    • 2.8.0, 3.0.0-alpha1
    • datanode, namenode
    • None

    Description

      This JIRA proposes to extend the work done in HADOOP-12964 and enable a configuration value that enables or disables that option.

      This allows HDFS to remain backward compatible as required by the branch-2.

      Attachments

        1. HDFS-10579.001.patch
          23 kB
          Anu Engineer
        2. HDFS-10579.002.patch
          23 kB
          Anu Engineer
        3. HDFS-10579.003.patch
          13 kB
          Anu Engineer

        Issue Links

          Dependent

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-13352 Make X-FRAME-OPTIONS configurable in HttpServer2

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-12964 Http server vulnerable to clickjacking

          • Major - Major loss of function.
          • Resolved
          relates to

          New Feature - A new feature of the product, which has yet to be developed. HADOOP-13008 Add XFS Filter for UIs to Hadoop Common

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              aengineer Anu Engineer
              aengineer Anu Engineer
              Votes:
              1 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: