[ambari] branch branch-2.7 updated: AMBARI-25159. http.strict-transport-security change does not take affect in 2.7.x. (mpapirkovskyy) (#2832)

[mpapirkovskyy]

This is an automated email from the ASF dual-hosted git repository.

mpapirkovskyy pushed a commit to branch branch-2.7
in repository https://gitbox.apache.org/repos/asf/ambari.git


The following commit(s) were added to refs/heads/branch-2.7 by this push:
     new 63be8e2  AMBARI-25159. http.strict-transport-security change does not 
take affect in 2.7.x. (mpapirkovskyy) (#2832)
63be8e2 is described below

commit 63be8e20dac7d66a35ea4714e46086631644a388
Author: Myroslav Papirkovskyi <mpapirkovs...@apache.org>
AuthorDate: Mon Feb 25 20:03:11 2019 +0200

    AMBARI-25159. http.strict-transport-security change does not take affect in 
2.7.x. (mpapirkovskyy) (#2832)
---
 .../src/main/java/org/apache/ambari/server/controller/AmbariServer.java | 2 ++
 1 file changed, 2 insertions(+)

diff --git 
a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
 
b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
index da7b58c..8635c09 100644
--- 
a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
+++ 
b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
@@ -134,6 +134,7 @@ import org.eclipse.jetty.server.Handler;
 import org.eclipse.jetty.server.HttpConfiguration;
 import org.eclipse.jetty.server.HttpConnectionFactory;
 import org.eclipse.jetty.server.NCSARequestLog;
+import org.eclipse.jetty.server.SecureRequestCustomizer;
 import org.eclipse.jetty.server.Server;
 import org.eclipse.jetty.server.ServerConnector;
 import org.eclipse.jetty.server.SessionIdManager;
@@ -633,6 +634,7 @@ public class AmbariServer {
 
 
       HttpConfiguration https_config = new HttpConfiguration();
+      https_config.addCustomizer(new SecureRequestCustomizer());
       https_config.setRequestHeaderSize(configs.getHttpRequestHeaderSize());
       https_config.setResponseHeaderSize(configs.getHttpResponseHeaderSize());
       https_config.setSendServerVersion(false);