[ https://issues.apache.org/jira/browse/HADOOP-8922?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13477837#comment-13477837 ]
Hudson commented on HADOOP-8922: -------------------------------- Integrated in Hadoop-Hdfs-trunk #1198 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/1198/]) HADOOP-8922. Provide alternate JSONP output for JMXJsonServlet to allow javascript in browser dashboard (Damien Hardy via bobby) (Revision 1398904) Result = SUCCESS bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1398904 Files : * /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/jmx/JMXJsonServlet.java * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/jmx/TestJMXJsonServlet.java > Provide alternate JSONP output for JMXJsonServlet to allow javascript in > browser dashboard > ------------------------------------------------------------------------------------------ > > Key: HADOOP-8922 > URL: https://issues.apache.org/jira/browse/HADOOP-8922 > Project: Hadoop Common > Issue Type: Improvement > Components: metrics > Affects Versions: 2.0.0-alpha > Reporter: Damien Hardy > Priority: Trivial > Labels: newbie, patch > Fix For: 3.0.0, 2.0.3-alpha > > Attachments: HADOOP-8922-3.patch, HADOOP-8922-4-branch-2.patch, > test.html > > > JMXJsonServlet may provide a JSONP alternative to JSON to allow javascript in > browser GUI to make requests. > For security purpose about XSS, browser limit request on other > domain[¹|#ref1] so that metrics from cluster nodes cannot be used in a full > js interface. > An example of this kind of dashboard is the bigdesk[²|#ref2] plugin for > ElasticSearch. > In order to achieve that the servlet should detect a GET parameter > (callback=xxxx) and modify the response by surrounding the Json value with > "xxxx(" and ");" [³|#ref3] > value "xxxx" is variable and should be provide by client as callback > parameter value. > {anchor:ref1}[1] > https://developer.mozilla.org/en-US/docs/Same_origin_policy_for_JavaScript > {anchor:ref2}[2] https://github.com/lukas-vlcek/bigdesk > {anchor:ref3}[3] http://en.wikipedia.org/wiki/JSONP -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira