Better safety of killing jobs via web interface
-----------------------------------------------

                 Key: HADOOP-3342
                 URL: https://issues.apache.org/jira/browse/HADOOP-3342
             Project: Hadoop Core
          Issue Type: Improvement
    Affects Versions: 0.16.3
            Reporter: Daniel Naber
            Priority: Minor
         Attachments: kill-job.diff

Although the option to kill jobs via the web interface is turned off by 
default, it should be made safer. Currently the "kill" action and its 
confirmation is just a link so it could be triggered by a crawler or by a 
browser's pre-fetching mechanism. The attached patch makes it work only with 
"POST" so that e.g. well-behaved crawlers shouldn't be able to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to