[jira] Commented: (HADOOP-3342) Better safety of killing jobs via web interface

["Otis Gospodnetic (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-3342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12594052#action_12594052 ] 

Otis Gospodnetic commented on HADOOP-3342:
------------------------------------------

Another option might be a tiny little bit of javascript called from onclick:

function onKillClick(jobID) {
  return confirm('Really kill Job ' + jobID + ' ?');
}


> Better safety of killing jobs via web interface
> -----------------------------------------------
>
>                 Key: HADOOP-3342
>                 URL: https://issues.apache.org/jira/browse/HADOOP-3342
>             Project: Hadoop Core
>          Issue Type: Improvement
>    Affects Versions: 0.16.3
>            Reporter: Daniel Naber
>            Priority: Minor
>         Attachments: kill-job.diff
>
>
> Although the option to kill jobs via the web interface is turned off by default, it should be made safer. Currently the "kill" action and its confirmation is just a link so it could be triggered by a crawler or by a browser's pre-fetching mechanism. The attached patch makes it work only with "POST" so that e.g. well-behaved crawlers shouldn't be able to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.