Fixing cross origin bug for rest calls that allow a malicious user to issue requests from a site other than the zeppelin server.

djoelz-tssr · djoelz-tssr · commit 3795de71e868 · 2015-08-20T11:59:12.000-07:00
Adding unit tests and a dependency to mockito to the server project (please comment if that is ok or if there is another preferred mocking framework).
Also upgrading the servelet version from 2.5 to 3.0 as this also fixes a security vulnerability with respect to httonly cookies.
diff --git a/zeppelin-server/src/test/java/org/apache/zeppelin/server/CorsFilterTests.java b/zeppelin-server/src/test/java/org/apache/zeppelin/server/CorsFilterTests.java
@@ -79,7 +79,6 @@ public void InvalidCorsFilterTest() throws IOException, ServletException {
         when(mockRequest.getMethod()).thenReturn("Empty");
         when(mockRequest.getServerName()).thenReturn("evillocalhost");
 
-
         doAnswer(new Answer() {
             @Override
             public Object answer(InvocationOnMock invocationOnMock) throws Throwable {
