You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Nitin Galave <ni...@gmail.com> on 2021/12/07 13:31:16 UTC
Re: Review Request 73644: RANGER-3443 : "X-Permitted-Cross-Domain-Policies" header not set by Ranger UI.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73644/
-----------------------------------------------------------
(Updated Dec. 7, 2021, 1:31 p.m.)
Review request for ranger, Dhaval Shah, Dineshkumar Yadav, Jayendra Parab, Kishor Gollapalliwar, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal, and Velmurugan Periasamy.
Bugs: RANGER-3443
https://issues.apache.org/jira/browse/RANGER-3443
Repository: ranger
Description (updated)
-------
Ranger does not return "X-Permitted-Cross-Domain-Policies" response header. OWASP best practices suggest explicitly setting this header to "none".
Diffs
-----
security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSecurityContextFormationFilter.java c50857940
Diff: https://reviews.apache.org/r/73644/diff/1/
Testing
-------
Tested that Added "X-Permitted-Cross-Domain-Policies" responce header.
Thanks,
Nitin Galave
Re: Review Request 73644: RANGER-3443 : "X-Permitted-Cross-Domain-Policies" header not set by Ranger UI.
Posted by Pradeep Agrawal <pr...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73644/#review223868
-----------------------------------------------------------
Ship it!
Ship It!
- Pradeep Agrawal
On Dec. 7, 2021, 1:31 p.m., Nitin Galave wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/73644/
> -----------------------------------------------------------
>
> (Updated Dec. 7, 2021, 1:31 p.m.)
>
>
> Review request for ranger, Dhaval Shah, Dineshkumar Yadav, Jayendra Parab, Kishor Gollapalliwar, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal, and Velmurugan Periasamy.
>
>
> Bugs: RANGER-3443
> https://issues.apache.org/jira/browse/RANGER-3443
>
>
> Repository: ranger
>
>
> Description
> -------
>
> Ranger does not return "X-Permitted-Cross-Domain-Policies" response header. OWASP best practices suggest explicitly setting this header to "none".
>
>
> Diffs
> -----
>
> security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSecurityContextFormationFilter.java c50857940
>
>
> Diff: https://reviews.apache.org/r/73644/diff/1/
>
>
> Testing
> -------
>
> Tested that Added "X-Permitted-Cross-Domain-Policies" responce header.
>
>
> Thanks,
>
> Nitin Galave
>
>
Re: Review Request 73644: RANGER-3443 : "X-Permitted-Cross-Domain-Policies" header not set by Ranger UI.
Posted by Dineshkumar Yadav <di...@outlook.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73644/#review223850
-----------------------------------------------------------
Ship it!
Ship It!
- Dineshkumar Yadav
On Dec. 7, 2021, 1:31 p.m., Nitin Galave wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/73644/
> -----------------------------------------------------------
>
> (Updated Dec. 7, 2021, 1:31 p.m.)
>
>
> Review request for ranger, Dhaval Shah, Dineshkumar Yadav, Jayendra Parab, Kishor Gollapalliwar, Abhay Kulkarni, Mehul Parikh, Pradeep Agrawal, and Velmurugan Periasamy.
>
>
> Bugs: RANGER-3443
> https://issues.apache.org/jira/browse/RANGER-3443
>
>
> Repository: ranger
>
>
> Description
> -------
>
> Ranger does not return "X-Permitted-Cross-Domain-Policies" response header. OWASP best practices suggest explicitly setting this header to "none".
>
>
> Diffs
> -----
>
> security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerSecurityContextFormationFilter.java c50857940
>
>
> Diff: https://reviews.apache.org/r/73644/diff/1/
>
>
> Testing
> -------
>
> Tested that Added "X-Permitted-Cross-Domain-Policies" responce header.
>
>
> Thanks,
>
> Nitin Galave
>
>