This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/storm.git
from a0ea47920 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#8514)
new ef60c8fe6 Hardening: fix CORS filter init params in UIHelpers
ALLOWED_ORIGINS_PARAM was mistakenly reused for the methods and headers init
parameters, causing the allowed methods and allowed headers configuration
to be silently dropped (and overwriting the origins value). Use
ALLOWED_METHODS_PARAM and ALLOWED_HEADERS_PARAM so the CrossOriginFilter is
configured as intended.
new 866acd2fc Hardening: use POST for profiling/debugging REST endpoints
(#8515)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
SECURITY.md | 9 ++++++---
docs/STORM-UI-REST-API.md | 14 +++++++-------
.../main/java/org/apache/storm/daemon/ui/UIHelpers.java | 4 ++--
.../org/apache/storm/daemon/ui/WEB-INF/component.html | 16 ++++++++--------
.../storm/daemon/ui/resources/StormApiResource.java | 12 ++++++------
5 files changed, 29 insertions(+), 26 deletions(-)
