[ 
https://issues.apache.org/jira/browse/HADOOP-7532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13087330#comment-13087330
 ] 

Luke Lu commented on HADOOP-7532:
---------------------------------

bq. Certainly many (if not most) templating frameworks (Jamon, Mako, etc) do 
this. Nothing novel there.

No, they're not enforced, you can easily turn off escaping with Jamon etc with 
one character. If the enforcement depends on human, it's not enforced in 
practice. You cannot even easily write a test-patch to check it because you 
NEED to turn the escaping off MANUALLY for script and style elements. Hamlet 
*can* enforce this automagically.

Another advantage I forgot to mention is the enforcement of HTML coding 
guidelines (for style or security reasons), say forbid certain tags (font, 
center etc.) and attributes (all the on* event attributes.). You cannot do this 
in any existing template systems. period.

bq. You don't have to learn a new syntax per se, but you do have to learn a new 
(and IMO arcane) Java library.

If you use an IDE, context sensitive help provides the description for the 
methods right there. I guess I can say Hamlet discriminates against non-IDE 
users, which is true in general for Java as well :)

bq. Why should we re-invent this wheel which has already been invented many 
times before?

The old wheel is not round/secure/robust enough? In MRv2, mapreduce becomes 
user land library, we'll allow user to have their own AM with webapps, which 
open up a whole new security threat model (MAPREDUCE-2858). Having a 
light-weight framework to help enforcing security is completely novel. 


> Hadoop web UI 2.0
> -----------------
>
>                 Key: HADOOP-7532
>                 URL: https://issues.apache.org/jira/browse/HADOOP-7532
>             Project: Hadoop Common
>          Issue Type: Improvement
>    Affects Versions: 0.23.0
>            Reporter: Luke Lu
>            Assignee: Luke Lu
>             Fix For: 0.23.0
>
>
> People have expressed interests of bringing Hadoop web UI up to date with the 
> lightweight embedded web mvc framework used in MAPREDUCE-279 (cf. 
> MAPREDUCE-2399). This is the umbrella jira for UI improvement for 0.23+. 
> Individual items like web framework refactor/move and the unique challenge 
> for MR2 webapp security will be filed separately.
> Thoughts/ideas on various improvement of Hadoop web UI are welcome here. Some 
> of the ideas will naturally become sub-issues.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to