[MAPREDUCE-3804] yarn webapp interface vulnerable to cross scripting attacks

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.23.0
• Fix Version/s: 0.23.1
• Component/s: jobhistoryserver, mrv2, resourcemanager
• Target Version/s: 0.23.1
• Hadoop Flags: Reviewed
• Release Note: fix cross scripting attacks vulnerability through webapp interface.
• Assignee: Dave Thompson
• Reporter: Dave Thompson
• Created: 03/Feb/12 21:34
• Updated: 05/Mar/12 02:49
• Resolved: 06/Feb/12 22:42

Description

Yarn webapp interface may be vulnerable to certain cross scripting attacks, injected through URL request.