Google GitGoogle Git
Sign in
apache/knox/master
commit
315ae7cff03182be4a5456b4d8fb50c947e4489d
[log]
author
hanicz <hanicz@users.noreply.github.com>
Fri Oct 02 11:59:06 2026 +0200
committer
GitHub <noreply@github.com>
Fri Oct 02 11:59:06 2026 +0200
tree
420508a3aa527e7c1707dc80488aba247c929639
parent
0bd23de3b09e5d12cd856837843e40f03f2f82f6 [diff]
KNOX-3488: Harden original-url cookie validation (#1429)

* KNOX-3488: Harden original-url validation

* KNOX-3488: Harden redirect and logout jsp originalUrl as well

* KNOX-3488: WebSSOResourceTest for empty cookie, and valid originalUrl cookie is removed
6 files changed
tree: 420508a3aa527e7c1707dc80488aba247c929639
  1. .github/
  2. build-tools/
  3. dev-support/
  4. gateway-admin-ui/
  5. gateway-applications/
  6. gateway-demo-ldap/
  7. gateway-demo-ldap-launcher/
  8. gateway-discovery-ambari/
  9. gateway-discovery-cm/
  10. gateway-docker/
  11. gateway-i18n/
  12. gateway-i18n-logging-log4j/
  13. gateway-i18n-logging-sl4j/
  14. gateway-openapi-ui/
  15. gateway-performance-test/
  16. gateway-provider-ha/
  17. gateway-provider-identity-assertion-common/
  18. gateway-provider-identity-assertion-concat/
  19. gateway-provider-identity-assertion-hadoop-groups/
  20. gateway-provider-identity-assertion-no-doas/
  21. gateway-provider-identity-assertion-pseudo/
  22. gateway-provider-identity-assertion-regex/
  23. gateway-provider-identity-assertion-switchcase/
  24. gateway-provider-jersey/
  25. gateway-provider-rewrite/
  26. gateway-provider-rewrite-common/
  27. gateway-provider-rewrite-func-hostmap-static/
  28. gateway-provider-rewrite-func-inbound-query-param/
  29. gateway-provider-rewrite-func-service-registry/
  30. gateway-provider-rewrite-step-encrypt-uri/
  31. gateway-provider-rewrite-step-secure-query/
  32. gateway-provider-security-authc-anon/
  33. gateway-provider-security-authc-remote/
  34. gateway-provider-security-authz-acls/
  35. gateway-provider-security-authz-composite/
  36. gateway-provider-security-authz-path-acls/
  37. gateway-provider-security-clientcert/
  38. gateway-provider-security-hadoopauth/
  39. gateway-provider-security-jwt/
  40. gateway-provider-security-k8s/
  41. gateway-provider-security-pac4j/
  42. gateway-provider-security-preauth/
  43. gateway-provider-security-shiro/
  44. gateway-provider-security-webappsec/
  45. gateway-release/
  46. gateway-release-common/
  47. gateway-server/
  48. gateway-server-launcher/
  49. gateway-server-xforwarded-filter/
  50. gateway-service-admin/
  51. gateway-service-as/
  52. gateway-service-auth/
  53. gateway-service-definitions/
  54. gateway-service-hashicorp-vault/
  55. gateway-service-hbase/
  56. gateway-service-health/
  57. gateway-service-hive/
  58. gateway-service-impala/
  59. gateway-service-jkg/
  60. gateway-service-knoxidf/
  61. gateway-service-knoxsso/
  62. gateway-service-knoxssout/
  63. gateway-service-knoxtoken/
  64. gateway-service-livy/
  65. gateway-service-metadata/
  66. gateway-service-nifi/
  67. gateway-service-nifi-registry/
  68. gateway-service-remoteconfig/
  69. gateway-service-restcatalog/
  70. gateway-service-rm/
  71. gateway-service-session/
  72. gateway-service-storm/
  73. gateway-service-test/
  74. gateway-service-tgs/
  75. gateway-service-vault/
  76. gateway-service-webhdfs/
  77. gateway-shell/
  78. gateway-shell-launcher/
  79. gateway-shell-release/
  80. gateway-shell-samples/
  81. gateway-shim-opensaml-security-api/
  82. gateway-spi/
  83. gateway-spi-common/
  84. gateway-test/
  85. gateway-test-release/
  86. gateway-test-release-utils/
  87. gateway-test-utils/
  88. gateway-topology-hadoop-xml/
  89. gateway-topology-simple/
  90. gateway-util-common/
  91. gateway-util-configinjector/
  92. gateway-util-launcher/
  93. gateway-util-urltemplate/
  94. hadoop-examples/
  95. knox-cli-launcher/
  96. knox-homepage-ui/
  97. knox-site/
  98. knox-token-generation-ui/
  99. knox-token-management-ui/
  100. knox-webshell-ui/
  101. src/
  102. .asf.yaml
  103. .dockerignore
  104. .gitattributes
  105. .gitignore
  106. .travis.yml.disabled
  107. AGENTS.md
  108. build.xml
  109. CHANGES
  110. doap_Knox.rdf
  111. ISSUES
  112. LICENSE
  113. NOTICE
  114. pom.xml
  115. README
  116. SECURITY.md
  117. THREAT_MODEL.md