[
https://issues.apache.org/jira/browse/AMBARI-18871?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15706778#comment-15706778
]
Hudson commented on AMBARI-18871:
---------------------------------
SUCCESS: Integrated in Jenkins build Ambari-trunk-Commit #6110 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/6110/])
AMBARI-18871 HTTP responses needs to have the character encoding (sangeetar:
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=2cc4c9ed7009be2e894fec7d24c3cb4f0dd9f24c])
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/security/AmbariViewsSecurityHeaderFilter.java
* (edit) ambari-server/conf/windows/ambari.properties
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/security/AmbariServerSecurityHeaderFilter.java
* (edit) ambari-server/conf/unix/ambari.properties
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/security/AbstractSecurityHeaderFilter.java
* (edit)
ambari-server/src/test/java/org/apache/ambari/server/security/AbstractSecurityHeaderFilterTest.java
> HTTP responses needs to have the character encoding specified in the content
> type header
> ----------------------------------------------------------------------------------------
>
> Key: AMBARI-18871
> URL: https://issues.apache.org/jira/browse/AMBARI-18871
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: trunk
> Reporter: Anita Gnanamalar Jebaraj
> Assignee: Anita Gnanamalar Jebaraj
> Fix For: trunk
>
> Attachments: AMBARI-18871-updated.patch, AMBARI-18871.patch
>
>
> The charset information(UTF-8) can be added to all the response headers to
> harden the security for the client. When the charset information is not
> specified the web browser may choose a different encoding by guessing which
> encoding is actually being used by the web page.
> This specific issue is mentioned in the section 3.1.1.5 of RFC7231
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
