zeppelin git commit: [ZEPPELIN-2067] SparkInterpreter prints unnecessary newline

2017-08-15 Thread minalee
Repository: zeppelin Updated Branches: refs/heads/branch-0.7 d0ee507bc -> 5c8d7902a [ZEPPELIN-2067] SparkInterpreter prints unnecessary newline ### What is this PR for? Spark interpreter prints unnecessary new line before the evaluation output is printed. See https://github.com/apache/zeppeli

[2/7] zeppelin git commit: [ZEPPELIN-2461] Masking Jetty Server version with User-configurable parameter

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2461] Masking Jetty Server version with User-configurable parameter ### What is this PR for? Security conscious organisations does not want to reveal the Application Server name and version to prevent Script-kiddies from finding the information easily when fingerprinting the Applicatio

[3/7] zeppelin git commit: [ZEPPELIN-2733] Remove System Information Leak in Authentication.java.

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2733] Remove System Information Leak in Authentication.java. ### What is this PR for? An information leak occurs when system data or debugging information leaves the program through an output stream or logging function. In the file Authentication.java, ``` Line 137: LOG.debug("Encrypted

[6/7] zeppelin git commit: [ZEPPELIN-2769] Prevent SQL injection for GetUserList.getUserList.

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2769] Prevent SQL injection for GetUserList.getUserList. ### What is this PR for? Prevent SQL injection for ```GetUserList.getUserList```. ### What type of PR is it? Improvement ### What is the Jira issue? https://issues.apache.org/jira/browse/ZEPPELIN-2769 Author: Yanbo Liang Close

[4/7] zeppelin git commit: [ZEPPELIN-2757] Enhance Authentication decrypting key generation.

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2757] Enhance Authentication decrypting key generation. ### What is this PR for? Enhance ```Authentication``` decrypting key generation by random ```KeyGenerator```. ### What type of PR is it? Improvement ### What is the Jira issue? https://issues.apache.org/jira/browse/ZEPPELIN-2757

[1/7] zeppelin git commit: [ZEPPELIN-2014] Jetty Directory Listing on app, assets, components, and scripts

2017-08-15 Thread prabhjyotsingh
Repository: zeppelin Updated Branches: refs/heads/branch-0.7 5f308547c -> d0ee507bc [ZEPPELIN-2014] Jetty Directory Listing on app, assets, components, and scripts ### What is this PR for? Added property for enable/disable public access to directories on server from Web ### What type of PR i

[5/7] zeppelin git commit: [ZEPPELIN-2765] Configurable X-FRAME-OPTIONS for Zeppelin

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2765] Configurable X-FRAME-OPTIONS for Zeppelin ### What is this PR for? The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a or . Sites can use this to avoid Clickjacking attacks, by ensuring that their cont

[7/7] zeppelin git commit: [ZEPPELIN-2775] Strict-Transport-Security and X-XSS-Protection Headers

2017-08-15 Thread prabhjyotsingh
[ZEPPELIN-2775] Strict-Transport-Security and X-XSS-Protection Headers The HTTP Strict-Transport-Security response header (often abbreviated as HSTS) is a security feature that lets a web site tell browsers that it should only be communicated with using HTTPS, instead of using HTTP. Note: The St