Re: Review Request 34649: Configurable poll delay for spooling directory source

2016-01-16 Thread Phil Scala
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/34649/#review114873 --- flume-ng-doc/sphinx/FlumeUserGuide.rst (line 965)

Re: Flume HTTP source and CSRF vulnerability

2016-01-16 Thread Roshan Naik
Thanks! On 1/16/16, 8:51 AM, "Ashish" wrote: >IMHO, No. XSRF can happen with session based things where two parties >are talking. >In Flume's case we never talk, we just listen and pass on the data. >Other than Http Ok, we send anything back. >We don't provide "Identifier" to the client which c

Re: Flume HTTP source and CSRF vulnerability

2016-01-16 Thread Ashish
IMHO, No. XSRF can happen with session based things where two parties are talking. In Flume's case we never talk, we just listen and pass on the data. Other than Http Ok, we send anything back. We don't provide "Identifier" to the client which can be used by anyone else. You must have encountered