Zeppelin enables CORS (Cross-Origin Request Sharing) by default with insecure settings (Access-Control-Allow-Origin: *)#216

Closed

djoelz wants to merge 3 commits intoapache:masterfrom

djoelz:master

Commits on Aug 16, 2015

Fixing cross origin bug for rest calls that allow a malicious user to issue requests from a site other than the zeppelin server.
joelz
committed
Fixing cross origin bug for rest calls that allow a malicious user to issue requests from a site other than the zeppelin server.
joelz
committed

Commits on Aug 19, 2015

Merge pull request #1 from apache/master
djoelz
committed