----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/73794/ -----------------------------------------------------------
(Updated April 20, 2022, 6:02 a.m.) Review request for ranger, Mateen Mansoori, Mehul Parikh, Pradeep Agrawal, and Ramesh Mani. Changes ------- Added null checks as per the review comments Bugs: RANGER-3387 https://issues.apache.org/jira/browse/RANGER-3387 Repository: ranger Description ------- Added extra validation for handling PUT/POST requests coming from KNOX proxy with different CSRF header than the one set by the client. Diffs (updated) ----- security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerCSRFPreventionFilter.java e02813fec security-admin/src/main/java/org/apache/ranger/security/web/filter/RangerKRBAuthenticationFilter.java 2d3308b99 Diff: https://reviews.apache.org/r/73794/diff/2/ Changes: https://reviews.apache.org/r/73794/diff/1-2/ Testing ------- 1. Verified functionality with Knox trusted proxy on both HA and non-HA clusters. 2. Also verified couple of regression test cases. Thanks, Sailaja Polavarapu