[
https://issues.apache.org/jira/browse/HBASE-20406?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sean Busbey updated HBASE-20406:
--------------------------------
Resolution: Fixed
Hadoop Flags: Incompatible change
Fix Version/s: 1.5.0
2.1.0
3.0.0
Release Note:
<!-- markdown -->
When configured to do thrift-over-http, the HBase Thrift API Server no longer
accepts the HTTP methods TRACE nor OPTIONS.
Status: Resolved (was: Patch Available)
Pushed to next minor releases. thanks [~risdenk]!
[~elserj] I presumed you were still in favor of the patch. If that's wrong, let
me know and I'll re-push with corrected signed-off-by lines.
> HBase Thrift HTTP - Shouldn't handle TRACE/OPTIONS methods
> ----------------------------------------------------------
>
> Key: HBASE-20406
> URL: https://issues.apache.org/jira/browse/HBASE-20406
> Project: HBase
> Issue Type: Improvement
> Components: security, Thrift
> Reporter: Kevin Risden
> Assignee: Kevin Risden
> Priority: Major
> Fix For: 3.0.0, 2.1.0, 1.5.0
>
> Attachments: HBASE-20406.master.001.patch,
> HBASE-20406.master.002.patch
>
>
> HBASE-10473 introduced a utility HttpServerUtil.constrainHttpMethods to
> prevent Jetty from answering on TRACE and OPTIONS methods. This should be
> added to Thrift in HTTP mode as well.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
