[ https://issues.apache.org/jira/browse/IMPALA-12031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Work on IMPALA-12031 started by Michael Smith. ---------------------------------------------- > Add security-related HTTP headers > --------------------------------- > > Key: IMPALA-12031 > URL: https://issues.apache.org/jira/browse/IMPALA-12031 > Project: IMPALA > Issue Type: Improvement > Components: Frontend > Affects Versions: Impala 4.2.0 > Reporter: Michael Smith > Assignee: Michael Smith > Priority: Major > > Add > * {{Strict-Transport-Security: max-age=31536000; includeSubDomains}} when > Impala serves HTTPS. Note that Impala's web server only serves HTTP or HTTPS, > never both at once. > * {{X-Content-Type-Options: nosniff}}. Impala does not provide any way to > upload files. > * {{Cache-control: no-store}} > to Impala's web UI to provide additional comfort for security folks. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org