hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Owen O'Malley (JIRA)" <j...@apache.org>
Subject [jira] Updated: (HADOOP-6441) Prevent remote CSS attacks in Hostname and UTF-7.
Date Tue, 15 Dec 2009 08:28:18 GMT

     [ https://issues.apache.org/jira/browse/HADOOP-6441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Owen O'Malley updated HADOOP-6441:
----------------------------------

    Attachment: h-6441.patch

This patch quotes the HTTP host header and sets the default encoding to UTF-8.

> Prevent remote CSS attacks in Hostname and UTF-7.
> -------------------------------------------------
>
>                 Key: HADOOP-6441
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6441
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Owen O'Malley
>            Assignee: Owen O'Malley
>             Fix For: 0.21.0
>
>         Attachments: h-6441.patch
>
>
> There are currently vulnerabilities for CSS in Hadoop's Web UI that allow CSS attacks.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message