laxmikantbpandhare opened a new issue, #15022:
URL: https://github.com/apache/druid/issues/15022

   Please provide a detailed title (e.g. "Broker crashes when using TopN query 
with Bound filter" instead of just "Broker crashes").
   
   0.25
   
   The Druid version is where the problem was encountered.
   
   ### Description
   
   Please include as much detailed information about the problem as possible.
   
   My Druid application is running and I am able to access with server IP and 
port
   
   **ex: https://SERVER_NAME:PORT_NUMBER**
   
   I tried spoofing it by adding some content at the end like below:
   
   
**https://SERVER_NAME:PORT_NUMBER/thiswebsitereditectto...https://www.attacker.com**
   
   the druid console showed **404 Not Found error** with user-supplied input.
   
   ```
   HTTP ERROR 404 Not Found
   URI: /thiswebsitereditectto...https://www.attacker.com
   STATUS: 404
   MESSAGE: Not Found
   SERVLET: default
   ```
   
   It should not show the input added by the User to avoid content spoofing.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to