Gabriella Lotz created KUDU-3625:
------------------------------------
Summary: Implement HTTP Method Error Handling for Non-GET Requests
on Web UI Paths
Key: KUDU-3625
URL: https://issues.apache.org/jira/browse/KUDU-3625
Project: Kudu
Issue Type: Bug
Reporter: Gabriella Lotz
Currently, the web server UI pages ({{{}"/"{}}}, "{{{}/tables"{}}}, etc.)
return a 200 OK response regardless of the HTTP method used. However, these
pages should only accept GET requests. Other HTTP methods (e.g., POST, PUT,
DELETE) should return a 405 Method Not Allowed response to avoid unintended
interactions.
Example on google.com a POST request returns this error:
{code:java}
405. That's an error. The request method POST is inappropriate for the URL /.
That's all we know.{code}
Similarly, an appropriate 405 Method Not Allowed response should be returned
for non-GET requests on the web UI pages.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
