Repository: ambari Updated Branches: refs/heads/trunk 20f112acd -> b098be07b
AMBARI-7344. CSRF Prevention is broken for the /proxy endpoint. (mpapirkovskyy) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/94bda467 Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/94bda467 Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/94bda467 Branch: refs/heads/trunk Commit: 94bda467597a55e75bda1e1469ec969dc7d5e5dc Parents: 20f112a Author: Myroslav Papirkovskyy <[email protected]> Authored: Wed Sep 17 21:19:12 2014 +0300 Committer: Myroslav Papirkovskyy <[email protected]> Committed: Fri Sep 26 19:34:55 2014 +0300 ---------------------------------------------------------------------- .../java/org/apache/ambari/server/controller/AmbariServer.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/94bda467/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java index e109f7e..a8cf891 100644 --- a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java +++ b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java @@ -380,7 +380,7 @@ public class AmbariServer { sh.setInitParameter("com.sun.jersey.spi.container.ContainerRequestFilters", "org.apache.ambari.server.api.AmbariCsrfProtectionFilter"); proxy.setInitParameter("com.sun.jersey.spi.container.ContainerRequestFilters", - "com.sun.jersey.api.container.filter.AmbariCsrfProtectionFilter"); + "org.apache.ambari.server.api.AmbariCsrfProtectionFilter"); } //Set jetty thread pool
