[SPARK-36400] Redact sensitive information in Spark Thrift Server UI

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.2
• Fix Version/s: 3.2.0, 3.1.3
• Component/s: SQL, Web UI
• Assignee: Kousuke Saruta
• Reporter: Denis Krivenko
• Created: 03/Aug/21 23:04
• Updated: 01/Sep/21 07:25
• Resolved: 18/Aug/21 04:34

Description

Spark UI displays sensitive information on "JDBC/ODBC Server" tab

The reason of the issue is in org.apache.spark.sql.hive.thriftserver.ui.SqlStatsPagedTable class here

      <td>
        <span class="description-input">
          {info.statement}
        </span>
      </td>

Issue Links

• links to: [Github] Pull Request #33743 (sarutak)
• links to: [Github] Pull Request #33885 (sarutak)