[ https://issues.apache.org/jira/browse/HADOOP-12234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15089380#comment-15089380 ]
Hadoop QA commented on HADOOP-12234: ------------------------------------ | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || | {color:red}-1{color} | {color:red} patch {color} | {color:red} 0m 4s {color} | {color:red} HADOOP-12234 does not apply to trunk. Rebase required? Wrong Branch? See https://wiki.apache.org/hadoop/HowToContribute for help. {color} | \\ \\ || Subsystem || Report/Notes || | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12746655/HADOOP-12234-v3-master.patch | | JIRA Issue | HADOOP-12234 | | Powered by | Apache Yetus 0.2.0-SNAPSHOT http://yetus.apache.org | | Console output | https://builds.apache.org/job/PreCommit-HADOOP-Build/8366/console | This message was automatically generated. > Web UI Framable Page > -------------------- > > Key: HADOOP-12234 > URL: https://issues.apache.org/jira/browse/HADOOP-12234 > Project: Hadoop Common > Issue Type: Bug > Reporter: Appy > Assignee: Appy > Attachments: HADOOP-12234-v2-master.patch, > HADOOP-12234-v3-master.patch, HADOOP-12234.patch > > > The web UIs do not include the "X-Frame-Options" header to prevent the pages > from being framed from another site. > Reference: > https://www.owasp.org/index.php/Clickjacking > https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet > https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options -- This message was sent by Atlassian JIRA (v6.3.4#6332)