[KNOX-1177] Retighten the rewrite rule on oozieui to reduce false positives

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 0.14.0
• Fix Version/s: 1.1.0
• Component/s: Server
• Flags: Patch
• Assignee: Kevin Minder
• Reporter: Wei Han
• Created: 07/Feb/18 23:14
• Updated: 28/Mar/19 14:05
• Resolved: 21/Feb/18 19:52

Description

This was previously fixed in KNOX-1106 and my change KNOX-1172 inadvertently regressed this as there was no test for this use case.

Currently oozieui rule will match uri with any scheme, which sometimes could cause false positives. For example the following rule in oozieui will rewrite viewfs://ns-default/foo/bar/oozie/myfile.jar to http://oozie:11000/oozie/myfile.jar

<rule dir="IN" name="OOZIEUI/oozie/inbound/root" pattern="://:/*/oozie/">
<rewrite template="{$serviceUrl[OOZIEUI]}/"/>
</rule>

The attached patch will tighten the rule to match only http and https schemes.

Issue Links

• is a clone of: KNOX-1106 Tighten the rewrite rule on oozieui to reduce false positives