hbase-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "stack (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-15328) Unvalidated Redirect in HMaster
Date Thu, 25 Feb 2016 14:32:18 GMT
stack created HBASE-15328:
-----------------------------

             Summary: Unvalidated Redirect in HMaster
                 Key: HBASE-15328
                 URL: https://issues.apache.org/jira/browse/HBASE-15328
             Project: HBase
          Issue Type: Bug
          Components: security
            Reporter: stack
            Priority: Minor


See OWASP page on why we should clean it up someday:

https://www.owasp.org/index.php/Unvalidated_Redirects_and_Forwards_Cheat_Sheet

Here is where we do the redirect:

{code}
    @Override
    public void doGet(HttpServletRequest request,
        HttpServletResponse response) throws ServletException, IOException {
      String redirectUrl = request.getScheme() + "://"
        + request.getServerName() + ":" + regionServerInfoPort
        + request.getRequestURI();
      response.sendRedirect(redirectUrl);
    }
  }
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message