MapR [SPARK-629] Spark UI for job lose CSS styles (apache#590)

arjunshroff · Nov 7, 2019 · 5eaced8 · 5eaced8
1 parent c5cbbcc
commit 5eaced8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/conf/jetty.headers.xml.template b/conf/jetty.headers.xml.template
@@ -4,6 +4,5 @@
     <comment>application.properties</comment>
     <entry key="X-XSS-Protection">1; mode=block</entry>
     <entry key="Strict-Transport-Security">max-age=31536000;includeSubDomains</entry>
-    <entry key="Content-Security-Policy">default-src https:</entry>
     <entry key="X-Content-Type-Options">nosniff</entry>
 </properties>
diff --git a/core/src/main/java/org/apache/spark/ui/filters/CustomHeadersFilter.java b/core/src/main/java/org/apache/spark/ui/filters/CustomHeadersFilter.java
@@ -45,7 +45,8 @@ public void init(FilterConfig filterConfig) {
 
     private void initDefaultHeaderProperties() {
         DEFAULT_HEADER_PROPERTIES.put("Strict-Transport-Security", "max-age=31536000;includeSubDomains");
-        DEFAULT_HEADER_PROPERTIES.put("Content-Security-Policy", "default-src https:");
+        //    TODO: Move Content-Security-Policy header back after fix for the COMMSECURE-130
+        //    DEFAULT_HEADER_PROPERTIES.put("Content-Security-Policy", "default-src https:");
         DEFAULT_HEADER_PROPERTIES.put("X-Content-Type-Options", "nosniff");
         DEFAULT_HEADER_PROPERTIES.put("X-XSS-Protection", "1; mode=block");
     }