[NIFI-5545] Add an Origin/Referer header Jetty filter

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Invalid
• Component/s: Security
• Labels: filter jetty
• Assignee: Nathan Gough
• Reporter: Nathan Gough
• Created: 21/Aug/18 18:26
• Updated: 14/Sep/18 01:08
• Resolved: 14/Sep/18 01:08

Description

Create a new Jetty filter that allows a NiFi administrator to enable Origin/Referer HTTP header filtering.

• If the source origin header does not match the target origin, check the referer header.
• If the referer header does not match the target origin, deny the request.
• The filter should enabled or disabled using a property in the NiFiProperties configuration file.
• The filter will only be required when NiFi is configured to use HTTPS.