[ 
https://issues.apache.org/jira/browse/HADOOP-3342?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Enis Soztutar updated HADOOP-3342:
----------------------------------

        Fix Version/s: 0.19.0
    Affects Version/s:     (was: 0.16.3)
                       0.19.0
               Status: Patch Available  (was: Open)

> Better safety of killing jobs via web interface
> -----------------------------------------------
>
>                 Key: HADOOP-3342
>                 URL: https://issues.apache.org/jira/browse/HADOOP-3342
>             Project: Hadoop Core
>          Issue Type: Improvement
>          Components: mapred
>    Affects Versions: 0.19.0
>            Reporter: Daniel Naber
>            Priority: Minor
>             Fix For: 0.19.0
>
>         Attachments: Hadoop-3342.patch, kill-job.diff
>
>
> Although the option to kill jobs via the web interface is turned off by 
> default, it should be made safer. Currently the "kill" action and its 
> confirmation is just a link so it could be triggered by a crawler or by a 
> browser's pre-fetching mechanism. The attached patch makes it work only with 
> "POST" so that e.g. well-behaved crawlers shouldn't be able to access it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to