You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Arun C Murthy (JIRA)" <ji...@apache.org> on 2009/12/16 06:24:18 UTC

[jira] Commented: (HADOOP-6441) Prevent remote CSS attacks in Hostname and UTF-7.

    [ https://issues.apache.org/jira/browse/HADOOP-6441?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12791212#action_12791212 ] 

Arun C Murthy commented on HADOOP-6441:
---------------------------------------

+1

> Prevent remote CSS attacks in Hostname and UTF-7.
> -------------------------------------------------
>
>                 Key: HADOOP-6441
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6441
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Owen O'Malley
>            Assignee: Owen O'Malley
>             Fix For: 0.21.0
>
>         Attachments: h-6441.patch
>
>
> There are currently vulnerabilities for CSS in Hadoop's Web UI that allow CSS attacks.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.