Author: jongyoul Date: Sun Jan 1 13:54:21 2023 New Revision: 1906315 URL: http://svn.apache.org/viewvc?rev=1906315&view=rev Log: Add security description
Added: zeppelin/site/security.html Modified: zeppelin/site/assets/themes/zeppelin/css/style.css zeppelin/site/contribution/contributions.html zeppelin/site/contribution/documentation.html zeppelin/site/contribution/webapplication.html zeppelin/site/contribution/zeppelinweb/goodPracticeGuide01.html zeppelin/site/contribution/zeppelinweb/goodPracticeGuide02.html zeppelin/site/contribution/zeppelinweb/goodPracticeGuide03.html zeppelin/site/contribution/zeppelinweb/goodPracticeGuide04.html zeppelin/site/releases/zeppelin-release-0.5.0-incubating.html zeppelin/site/releases/zeppelin-release-0.5.5-incubating.html zeppelin/site/releases/zeppelin-release-0.5.6-incubating.html zeppelin/site/releases/zeppelin-release-0.6.0.html zeppelin/site/releases/zeppelin-release-0.6.1.html zeppelin/site/releases/zeppelin-release-0.6.2.html zeppelin/site/releases/zeppelin-release-0.7.0.html zeppelin/site/releases/zeppelin-release-0.7.1.html zeppelin/site/releases/zeppelin-release-0.7.2.html zeppelin/site/releases/zeppelin-release-0.7.3.html zeppelin/site/releases/zeppelin-release-0.8.0.html zeppelin/site/releases/zeppelin-release-0.8.1.html zeppelin/site/releases/zeppelin-release-0.8.2.html zeppelin/site/releases/zeppelin-release-0.9.0.html Modified: zeppelin/site/assets/themes/zeppelin/css/style.css URL: http://svn.apache.org/viewvc/zeppelin/site/assets/themes/zeppelin/css/style.css?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/assets/themes/zeppelin/css/style.css (original) +++ zeppelin/site/assets/themes/zeppelin/css/style.css Sun Jan 1 13:54:21 2023 @@ -1117,6 +1117,10 @@ and (max-width: 768px) { font-size: 15px; } + .docs .dropdown-menu li.title a { + color: white !important; + } + .navbar-collapse.in { overflow-y: auto; } @@ -1214,6 +1218,10 @@ and (max-width: 996px) { font-size: 15px; } + .docs .dropdown-menu li.title a { + color: white !important; + } + .navbar-inverse .navbar-nav > li > a { margin-left: -12px; font-size: 15px; @@ -1300,6 +1308,11 @@ and (max-width: 1024px) { padding-left: 30px; } +.docs .dropdown-menu li.title a { + padding-left: 0px; + color: #3071a9; +} + /* ** Media Queries CSS */ Modified: zeppelin/site/contribution/contributions.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/contributions.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/contributions.html (original) +++ zeppelin/site/contribution/contributions.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -227,6 +228,10 @@ + + + + <li><a href="/contribution/webapplication.html">Web Application</a></li> @@ -595,7 +600,7 @@ HADOOP_HOME=YOUR_HADOOP_HOME JAVA_HOME=Y <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/documentation.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/documentation.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/documentation.html (original) +++ zeppelin/site/contribution/documentation.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -227,6 +228,10 @@ + + + + <li><a href="/contribution/webapplication.html">Web Application</a></li> @@ -518,7 +523,7 @@ svn co https://svn.apache.org/repos/asf/ <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/webapplication.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/webapplication.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/webapplication.html (original) +++ zeppelin/site/contribution/webapplication.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,6 +236,10 @@ + + + + @@ -529,7 +534,7 @@ we need to do some includes manually in <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/zeppelinweb/goodPracticeGuide01.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/zeppelinweb/goodPracticeGuide01.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/zeppelinweb/goodPracticeGuide01.html (original) +++ zeppelin/site/contribution/zeppelinweb/goodPracticeGuide01.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,6 +236,10 @@ + + + + @@ -403,7 +408,7 @@ in this <a href="https://github.com/john <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/zeppelinweb/goodPracticeGuide02.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/zeppelinweb/goodPracticeGuide02.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/zeppelinweb/goodPracticeGuide02.html (original) +++ zeppelin/site/contribution/zeppelinweb/goodPracticeGuide02.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,6 +236,10 @@ + + + + @@ -425,7 +430,7 @@ $rootScope.$on('eventToCatch', f <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/zeppelinweb/goodPracticeGuide03.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/zeppelinweb/goodPracticeGuide03.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/zeppelinweb/goodPracticeGuide03.html (original) +++ zeppelin/site/contribution/zeppelinweb/goodPracticeGuide03.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,6 +236,10 @@ + + + + @@ -491,7 +496,7 @@ private variables, public variables, ini <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/contribution/zeppelinweb/goodPracticeGuide04.html URL: http://svn.apache.org/viewvc/zeppelin/site/contribution/zeppelinweb/goodPracticeGuide04.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/contribution/zeppelinweb/goodPracticeGuide04.html (original) +++ zeppelin/site/contribution/zeppelinweb/goodPracticeGuide04.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,6 +236,10 @@ + + + + @@ -399,7 +404,7 @@ We recommend the usage of <code>ng-bind< <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.5.0-incubating.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.5.0-incubating.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.5.0-incubating.html (original) +++ zeppelin/site/releases/zeppelin-release-0.5.0-incubating.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -235,7 +236,7 @@ limitations under the License. <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.5.5-incubating.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.5.5-incubating.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.5.5-incubating.html (original) +++ zeppelin/site/releases/zeppelin-release-0.5.5-incubating.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -326,7 +327,7 @@ From this release, a single binary packa <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.5.6-incubating.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.5.6-incubating.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.5.6-incubating.html (original) +++ zeppelin/site/releases/zeppelin-release-0.5.6-incubating.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -285,7 +286,7 @@ More than 110 issues has been resolved.< <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.6.0.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.6.0.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.6.0.html (original) +++ zeppelin/site/releases/zeppelin-release-0.6.0.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -281,7 +282,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.6.1.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.6.1.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.6.1.html (original) +++ zeppelin/site/releases/zeppelin-release-0.6.1.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -238,7 +239,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.6.2.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.6.2.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.6.2.html (original) +++ zeppelin/site/releases/zeppelin-release-0.6.2.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -231,7 +232,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.7.0.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.7.0.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.7.0.html (original) +++ zeppelin/site/releases/zeppelin-release-0.7.0.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -330,7 +331,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.7.1.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.7.1.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.7.1.html (original) +++ zeppelin/site/releases/zeppelin-release-0.7.1.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -221,7 +222,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.7.2.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.7.2.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.7.2.html (original) +++ zeppelin/site/releases/zeppelin-release-0.7.2.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -201,7 +202,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.7.3.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.7.3.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.7.3.html (original) +++ zeppelin/site/releases/zeppelin-release-0.7.3.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -201,7 +202,7 @@ You can visit <a href="https://issues.ap <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.8.0.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.8.0.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.8.0.html (original) +++ zeppelin/site/releases/zeppelin-release-0.8.0.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -306,7 +307,7 @@ bongo</p> <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.8.1.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.8.1.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.8.1.html (original) +++ zeppelin/site/releases/zeppelin-release-0.8.1.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -214,7 +215,7 @@ Patrice Clement</p> <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.8.2.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.8.2.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.8.2.html (original) +++ zeppelin/site/releases/zeppelin-release-0.8.2.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -214,7 +215,7 @@ Patrice Clement</p> <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Modified: zeppelin/site/releases/zeppelin-release-0.9.0.html URL: http://svn.apache.org/viewvc/zeppelin/site/releases/zeppelin-release-0.9.0.html?rev=1906315&r1=1906314&r2=1906315&view=diff ============================================================================== --- zeppelin/site/releases/zeppelin-release-0.9.0.html (original) +++ zeppelin/site/releases/zeppelin-release-0.9.0.html Sun Jan 1 13:54:21 2023 @@ -92,6 +92,7 @@ <li><a href="/docs/0.9.0">0.9.0</a></li> <li><a href="/docs/0.8.2">0.8.2</a></li> <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> </ul> </li> @@ -247,7 +248,7 @@ jpmcmu</p> <footer> - <!-- <p>© 2022 The Apache Software Foundation</p>--> + <!-- <p>© 2023 The Apache Software Foundation</p>--> </footer> </body> </html> Added: zeppelin/site/security.html URL: http://svn.apache.org/viewvc/zeppelin/site/security.html?rev=1906315&view=auto ============================================================================== --- zeppelin/site/security.html (added) +++ zeppelin/site/security.html Sun Jan 1 13:54:21 2023 @@ -0,0 +1,263 @@ + + +<!DOCTYPE html> +<html lang="en"> + <head> + <meta charset="utf-8"> + <title>Security</title> + <meta name="description" content="This page explains what security characteristics can be expected from Zeppelin, what measures operators of a Zeppelin instance will have to take, and how to report any security issues found in the Zeppelin software."> + <meta name="author" content="The Apache Software Foundation"> + + <!-- Enable responsive viewport --> + <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" /> + + <!-- Le HTML5 shim, for IE6-8 support of HTML elements --> + <!--[if lt IE 9]> + <script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script> + <![endif]--> + + <!-- Le styles --> + <link href="https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" integrity="sha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN" crossorigin="anonymous"> + <link href="https://fonts.googleapis.com/icon?family=Material+Icons"> + <link href="/assets/themes/zeppelin/bootstrap/css/bootstrap.css" rel="stylesheet"> + <link href="/assets/themes/zeppelin/css/style.css?body=1" rel="stylesheet" type="text/css"> + <link href="/assets/themes/zeppelin/css/syntax.css" rel="stylesheet" type="text/css" media="screen" /> + <!-- Le fav and touch icons --> + <!-- Update these with your own images + <link rel="shortcut icon" href="images/favicon.ico"> + <link rel="apple-touch-icon" href="images/apple-touch-icon.png"> + <link rel="apple-touch-icon" sizes="72x72" href="images/apple-touch-icon-72x72.png"> + <link rel="apple-touch-icon" sizes="114x114" href="images/apple-touch-icon-114x114.png"> + --> + <link rel="apple-touch-icon" sizes="180x180" href="/assets/themes/zeppelin/img/favicon/apple-touch-icon.png"> + <link rel="icon" type="image/png" sizes="32x32" href="/assets/themes/zeppelin/img/favicon/favicon-32x32.png"> + <link rel="icon" type="image/png" sizes="16x16" href="/assets/themes/zeppelin/img/favicon/favicon-16x16.png"> + <link rel="icon" type="image/png" href="/assets/themes/zeppelin/img/favicon/favicon.ico"> + <link rel="manifest" href="/assets/themes/zeppelin/img/favicon/manifest.json"> + <link rel="mask-icon" href="/assets/themes/zeppelin/img/favicon/safari-pinned-tab.svg" color="#438bc9"> + <meta name="theme-color" content="#ffffff"> + + <!-- Js --> + <script src="https://code.jquery.com/jquery-1.10.2.min.js"></script> + <script src="https://ajax.googleapis.com/ajax/libs/angularjs/1.3.15/angular.min.js"></script> + <script src="https://s3.amazonaws.com/helium-package/helium.js"></script> + <script src="https://s3.amazonaws.com/apache-zeppelin/post/medium.js"></script> + <script src="https://angular-ui.github.io/bootstrap/ui-bootstrap-tpls-2.5.0.js"></script> + <script src="/assets/themes/zeppelin/bootstrap/js/bootstrap.min.js"></script> + <script src="/assets/themes/zeppelin/js/docs.js"></script> + <script src="/assets/themes/zeppelin/js/anchor.min.js"></script> + <script src="/assets/themes/zeppelin/js/moment.min.js"></script> + <script src="/assets/themes/zeppelin/js/helium.controller.js"></script> + <script src="/assets/themes/zeppelin/js/medium.controller.js"></script> + + <!-- atom & rss feed --> + <link href="/atom.xml" type="application/atom+xml" rel="alternate" title="Sitewide ATOM Feed"> + <link href="/rss.xml" type="application/rss+xml" rel="alternate" title="Sitewide RSS Feed"> + </head> + + <body> + + <div class="navbar navbar-inverse navbar-fixed-top" role="navigation"> + <div class="container"> + <div class="navbar-header"> + <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse"> + <span class="sr-only">Toggle navigation</span> + <span class="icon-bar"></span> + <span class="icon-bar"></span> + <span class="icon-bar"></span> + </button> + <a class="navbar-brand" href="/"> + <img src="/assets/themes/zeppelin/img/zeppelin_logo.png" style="margin-top: -6px;" width="50" alt="I'm zeppelin"> + <span style="margin-left: 5px;"> Apache Zeppelin </span> + </a> + </div> + <nav class="navbar-collapse collapse" role="navigation"> + <ul class="nav navbar-nav navbar-right"> + <li><a href="/docs/latest/quickstart/install.html">Quick Start</a></li> + <!-- Download --> + <li class="docs"> + <a href="#" data-toggle="dropdown" class="dropdown-toggle">Download<b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="/download.html">Download Zeppelin</a></li> + <li><a href="/supported_interpreters.html">Supported Interpreters</a></li> + </ul> + </li> + <!-- Docs --> + <li class="docs"> + <a href="#" data-toggle="dropdown" class="dropdown-toggle">Docs<b class="caret"></b></a> + <ul class="dropdown-menu"> + <li class="title"><span><b>Release</b><span></li> + <li><a href="/docs/0.10.1">0.10.1</a></li> + <li><a href="/docs/0.10.0">0.10.0</a></li> + <li><a href="/docs/0.9.0">0.9.0</a></li> + <li><a href="/docs/0.8.2">0.8.2</a></li> + <li><a href="documentation.html">Older Versions</a></li> + <li class="title"><span><b><a href="security.html">Security</a></b><span></li> + </ul> + </li> + + <li><a href="/helium_packages.html">Helium</a></li> + + <li class="docs"> + <a href="#" data-toggle="dropdown" class="dropdown-toggle">Community<b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="/community.html">Contributors</a></li> + <li><a href="https://github.com/apache/zeppelin">GitHub</a></li> + </ul> + </li> + <!-- Apache --> + <li class="docs"> + <a href="#" data-toggle="dropdown" class="dropdown-toggle">Apache<b class="caret"></b></a> + <ul class="dropdown-menu"> + <li><a href="http://www.apache.org/foundation/how-it-works.html">Apache Software Foundation</a></li> + <li><a href="http://www.apache.org/licenses/">Apache License</a></li> + <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li> + <li><a href="/assets.html">Assets</a></li> + <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li> + </ul> + </li> + </ul> + </nav><!--/.navbar-collapse --> + </div> +</div> + + + + + <div class="content"> + + +<!--<div class="hero-unit Security"> + <h1></h1> +</div> +--> + +<div class="row"> + <div class="col-md-12"> + <!-- +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + +http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +--> + +<h1>Zeppelin Security</h1> + +<p>This page explains what security characteristics can be expected from +Zeppelin, what measures operators of a Zeppelin instance will have to +take, and how to report any security issues found in the Zeppelin +software.</p> + +<h2>Code execution on the server</h2> + +<p>It is the nature of the Zeppelin software that it allows +uploading code from the browser and executing it on the server.</p> + +<p>Because of this, you should make sure your Zeppelin instance is only +available to trusted users, and the server on which Zeppelin is +installed does not contain any secrets or have privileges beyond +those the users are trusted with.</p> + +<h3>Zeppelin on Docker</h3> + +<p>An exception to the above is when the Zeppelin interpreter +is <a href="https://zeppelin.apache.org/docs/latest/quickstart/docker.html">run in a Docker container</a>. +This isolates the operating environment of the interpreter through the docker container.</p> + +<h3>Zeppelin on Kubernetes</h3> + +<p>A similar exception exists when Zeppelin is +<a href="https://zeppelin.apache.org/docs/latest/quickstart/kubernetes.html">deployed on Kubernetes</a>. +In this case Zeppelin creates pods for individual interpreters, +and also the Spark interpreter is auto configured to use Spark +on Kubernetes in client mode.</p> + +<h2>JavaScript code execution in the browser</h2> + +<p>Zeppelin allows notes to produce rich output, including HTML and even +executing JavaScript code. This means that when users view each others' +notes, HTML and JavaScript controlled by the creator of the note will +be executed in the browser that views it.</p> + +<p>Because of this, you should make sure your Zeppelin instance is only +available to trusted users. When deploying Zeppelin on a domain that +is shared with other applications, appropriate measures may have to be +taken to avoid a compromised Zeppelin notebook to also grant access +to other services on the same domain.</p> + +<h2>Authentication</h2> + +<p>If you expose your Zeppelin instance on a network you don't fully trust, +you should configure <a href="https://zeppelin.apache.org/docs/latest/setup/security/shiro_authentication.html">Apache Shiro authentication</a>.</p> + +<p>Non-authenticated users cannot view, store or execute notes, so they +cannot execute code on the server or on other users' browsers. +Authenticated users, however, have the same access as described above, +so even when using authentication it is still important to only give +trusted users access to Zeppelin. Specifically, unless Docker or K8s +isolation has been configured as mentioned above, users technically +have access to all notes by other users.</p> + +<h1>Reporting security issues</h1> + +<p>If you have found a potential security issue in Zeppelin, +such as a way to bypass the Shiro authentication, +we encourage you to report this problem at +<a href="mailto:secur...@zeppelin.apache.org">secur...@zeppelin.apache.org</a>. +This is a private mailing list. Please send one plain-text email +for each vulnerability you are reporting.</p> + +<h2>Vulnerability handling</h2> + +<p>An overview of the vulnerability handling process is:</p> + +<ul> +<li>The reporter reports the vulnerability privately to <a href="mailto:secur...@zeppelin.apache.org">secur...@zeppelin.apache.org</a>.</li> +<li>The Zeppelin project security team works privately with the reporter to resolve the vulnerability.</li> +<li>The Zeppelin project creates a new release of the package the vulnerabilty affects to deliver its fix.</li> +<li>The Zeppelin project publicly announces the vulnerability and describes how to apply the fix.</li> +</ul> + +<p>Committers should read a <a href="https://www.apache.org/security/committers.html">more detailed description of the process</a>. Reporters of security vulnerabilities may also find it useful.</p> + + </div> +</div> + + + </div> + + + + + + + <script type="text/javascript"> + (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ + (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), + m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) + })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); + + ga('create', 'UA-45176241-5', 'zeppelin.apache.org'); + ga('require', 'linkid', 'linkid.js'); + ga('send', 'pageview'); + +</script> + + + + + + + <footer> + <!-- <p>© 2023 The Apache Software Foundation</p>--> + </footer> + </body> +</html> +