[ https://issues.apache.org/jira/browse/HBASE-20406?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16437324#comment-16437324 ]
Kevin Risden commented on HBASE-20406: -------------------------------------- Whoops thanks [~busbey] for triggering the patch. I can try to put together a test for this (I didn't see other tests for OPTIONS/TRACE but shouldn't be hard to put together). It might take me a few days. > HBase Thrift HTTP - Shouldn't handle TRACE/OPTIONS methods > ---------------------------------------------------------- > > Key: HBASE-20406 > URL: https://issues.apache.org/jira/browse/HBASE-20406 > Project: HBase > Issue Type: Improvement > Components: security, Thrift > Reporter: Kevin Risden > Assignee: Kevin Risden > Priority: Major > Attachments: HBASE-20406.master.001.patch > > > HBASE-10473 introduced a utility HttpServerUtil.constrainHttpMethods to > prevent Jetty from answering on TRACE and OPTIONS methods. This should be > added to Thrift in HTTP mode as well. -- This message was sent by Atlassian JIRA (v7.6.3#76005)