[
https://issues.apache.org/jira/browse/KNOX-1177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16371940#comment-16371940
]
Kevin Minder commented on KNOX-1177:
------------------------------------
Followup commit for a missed rule change.
7e588554ad3510663ee27d9345d680a42c584ae0 | 2018-02-21 15:12:09 -0500 | Kevin
Minder | KNOX-1177: Retighten the rewrite rule on oozieui to reduce false
positives. Replace http with * in rule.
> Retighten the rewrite rule on oozieui to reduce false positives
> ---------------------------------------------------------------
>
> Key: KNOX-1177
> URL: https://issues.apache.org/jira/browse/KNOX-1177
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Affects Versions: 0.14.0
> Reporter: Wei Han
> Assignee: Kevin Minder
> Priority: Trivial
> Fix For: 1.1.0
>
>
> This was previously fixed in KNOX-1106 and my change KNOX-1172 inadvertently
> regressed this as there was no test for this use case.
> Currently oozieui rule will match uri with any scheme, which sometimes could
> cause false positives. For example the following rule in oozieui will rewrite
> viewfs://ns-default/foo/bar/oozie/myfile.jar to
> [http://oozie:11000/oozie/myfile.jar]
> <rule dir="IN" name="OOZIEUI/oozie/inbound/root" pattern="*://*:*/**/oozie/">
> <rewrite template="{$serviceUrl[OOZIEUI]}/"/>
> </rule>
> The attached patch will tighten the rule to match only http and https schemes.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
