You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zeppelin.apache.org by "Jeff Hammel (Jira)" <ji...@apache.org> on 2020/09/22 15:52:00 UTC

[jira] [Created] (ZEPPELIN-5061) User notebook information is leaked through home page

Jeff Hammel created ZEPPELIN-5061:
-------------------------------------

             Summary: User notebook information is leaked through home page
                 Key: ZEPPELIN-5061
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-5061
             Project: Zeppelin
          Issue Type: Bug
          Components: Homepage
    Affects Versions: 0.9.0
            Reporter: Jeff Hammel


Steps to reproduce: 
 * Have at least two users and two browser sessions simultaneously, users A and B
 * User A creates a notebook and navigates to the home page.  Their notebook will display
 * User B creates a notebook and navigates to the home page.  Their notebook will display
 * However, in User A's browser session, User B's notebook will display.  

Note that notebook sharing is disabled.  This seems to be like some global state that websockets is mistakely updating.  More than that I haven't determined



--
This message was sent by Atlassian Jira
(v8.3.4#803005)