hbase-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sean Busbey <bus...@cloudera.com>
Subject any volunteers for HBASE-14148?
Date Fri, 31 Jul 2015 18:36:52 GMT
Hi Folks!

(Before reading further, please DO NOT read any of the patches on the
referenced jira nor the OWASP website's example JavaEE filter)

We're looking for someone who can make a filter to add the X-Frame-Options
header to our web UIs to defend against a known attack vector (see the
ticket description for details on the attack).

The last patch made use of some code from OWASP (appropriately licensed),
but Elliot would prefer we not use copied code for something
straight-forward to implement on our own.

To avoid licensing issues, we need someone who has not seen the OWASP code
to take over the jira.

Any takers?

[1] https://issues.apache.org/jira/browse/HBASE-14148


  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message