[SPARK-30361] Monitoring URL do not redact information about environment

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Fix Version/s: 3.0.0
• Component/s: Spark Core
• Assignee: Ajith S
• Reporter: Ajith S
• Created: 26/Dec/19 13:04
• Updated: 30/Dec/19 15:11
• Resolved: 30/Dec/19 15:11

Description

UI and event logs redact sensitive information. But the monitoring URL, https://spark.apache.org/docs/latest/monitoring.html#rest-api , specifically /applications/[app-id]/environment does not, which is a security issue.

Issue Links

• links to: GitHub Pull Request #27018