nflx-2018-001 security problem
valdar opened this issue · 1 comments
valdar commented
If I understood correctly what is described at https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2018-001.md , the problem is in the proxy server part of the dashboard which is there mostli because of historical CORS problems.
Would be possible to produce a client only version of the dashboard that could be re-integrated back in the main hystrix repo.
Would you accept a contribution like that (taking care also of adding options for CORS headers in the streams servlets)?
valdar commented
The PR would be something like #2 . See also Netflix/Hystrix#1761 about adding CORS.