[
https://issues.apache.org/jira/browse/YARN-10824?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rajshree Mishra updated YARN-10824:
-----------------------------------
Description:
The following issue was reported by one of our internal web security check
tools:
Passing a title to the jobHistoryServer(jhs) or Nodemanager(nm) pages using a
url similar to:
[https://[hostname]:[jhs_port]/jobhistory/about?title=12345%27%22]
or
[https://[hostname]:[nm_port]/node?title=12345]
sets the page title to be set to the value mentioned.
[Image attached]
was:
Passing a title to the jobHistoryServer(jhs) or Nodemanager(nm) pages using a
url similar to:
https://[hostname]:[jhs_port]/jobhistory/about?title=12345%27%22
or
https://[hostname]:[nm_port]/node?title=12345
sets the page title to be set to the value mentioned.
[Image attached]
> Title not set for JHS and NM webpages
> -------------------------------------
>
> Key: YARN-10824
> URL: https://issues.apache.org/jira/browse/YARN-10824
> Project: Hadoop YARN
> Issue Type: Bug
> Reporter: Rajshree Mishra
> Assignee: Bilwa S T
> Priority: Major
> Attachments: JHS URL.jpg, NM URL.jpg, YARN-10824.001.patch
>
>
> The following issue was reported by one of our internal web security check
> tools:
> Passing a title to the jobHistoryServer(jhs) or Nodemanager(nm) pages using a
> url similar to:
> [https://[hostname]:[jhs_port]/jobhistory/about?title=12345%27%22]
> or
> [https://[hostname]:[nm_port]/node?title=12345]
> sets the page title to be set to the value mentioned.
> [Image attached]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
