Skip to content

0.5.0: Merge pull request #258 from Netflix/szimmerman/restrict-cors

Choose a tag to compare

View all tags
@szimmer1 szimmer1 released this 06 May 05:29
· 27 commits to master since this release
0.5.0
987a7e4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Breaking change: NDBench server will not respond with CORS headers by default. Previously, the server responded with "Access-Control-Allow-Origin: *" by default, which allowed any origin to make requests to the server. Operators can now configure the Access-Control-Allow-Origin header value with the ndbench.config.allowedOrigins property. This is set to http://localhost:8080 by default in the development environment. In non-development environment, no CORS headers will be returned by default, effectively same-origin policy.

All changes:

  • Add Java requirements to README
  • Restrict CORS to configurable origins or same-origin policy by default (no CORS headers).
  • Rotate publishing credentials
  • Use required-jcenter-modules-backup repository for Palantir modules
  • Fix tunable config double-write bug. Fix broken Gradle appRun task by upgrading gretty version.
  • Check palantir/docker-compose-rule JAR's to remove bintray dependency
  • Upgrade nebula.netflixoss to replace bintray publication and update TravisCI secrets
Assets 2
Loading