[ https://issues.apache.org/jira/browse/HADOOP-8922?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13475208#comment-13475208 ]
Damien Hardy commented on HADOOP-8922: -------------------------------------- Hi Harsh, Yes it allows to load a page with some JS pulling periodicly data as json to elaborate living graphs for exemple. Also Yes :) it is described in more generic sources : * http://www.w3.org/Security/wiki/Same_Origin_Policy * http://en.wikipedia.org/wiki/Same_origin_policy I can try to make some patch (I am more an admin than a dev profile) but should be quite simple and I would love to have my name in hadoop-common changelog :D > Proviade alternate JSONP output for JMXJsonServlet to enable javascript in > browser dashboard > -------------------------------------------------------------------------------------------- > > Key: HADOOP-8922 > URL: https://issues.apache.org/jira/browse/HADOOP-8922 > Project: Hadoop Common > Issue Type: Improvement > Components: metrics > Reporter: Damien Hardy > Priority: Trivial > > JMXJsonServlet may provide a JSONP alternative to JSON to allow javascript in > browser GUI to make requests. > For security purpose about XSS, browser limit request on other > domain[¹|#ref1] so that metrics from cluster nodes cannot be used in a full > js interface. > An example of this kind of dashboard is the bigdesk[²|#ref2] plugin for > ElasticSearch. > In order to achieve that the servlet should detect a GET parameter > (callback=xxxx) and modify the response by surrounding the Json value with > "xxxx(" and ");" [³|#ref3] > value "xxxx" is variable and should be provide by client as callback > parameter value. > {anchor:ref1}[1] > https://developer.mozilla.org/en-US/docs/Same_origin_policy_for_JavaScript > {anchor:ref2}[2] https://github.com/lukas-vlcek/bigdesk > {anchor:ref3}[3] http://en.wikipedia.org/wiki/JSONP -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira