[GitHub] zeppelin pull request #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-12 Thread yanboliang
GitHub user yanboliang reopened a pull request: https://github.com/apache/zeppelin/pull/2621 [Minor] Remove hardcoded key in zeppelinhub. ### What is this PR for? Hardcoded seed/key may cause security issue, so remove potential risk. ### What type of PR is it

[GitHub] zeppelin pull request #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-12 Thread yanboliang
Github user yanboliang closed the pull request at: https://github.com/apache/zeppelin/pull/2621 ---

[GitHub] zeppelin pull request #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-11 Thread yanboliang
GitHub user yanboliang reopened a pull request: https://github.com/apache/zeppelin/pull/2621 [Minor] Remove hardcoded key in zeppelinhub. ### What is this PR for? Hardcoded seed/key may cause security issue, so remove potential risk. ### What type of PR is it

[GitHub] zeppelin pull request #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-11 Thread yanboliang
Github user yanboliang closed the pull request at: https://github.com/apache/zeppelin/pull/2621 ---

[GitHub] zeppelin issue #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-11 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2621 @prabhjyotsingh Please help review. ---

[GitHub] zeppelin pull request #2621: [Minor] Remove hardcoded key in zeppelinhub.

2017-10-11 Thread yanboliang
GitHub user yanboliang opened a pull request: https://github.com/apache/zeppelin/pull/2621 [Minor] Remove hardcoded key in zeppelinhub. ### What is this PR for? Hardcoded key may cause security issue, so remove the potential risk. ### What type of PR is it

[GitHub] zeppelin issue #2475: [ZEPPELIN-2757] Enhance Authentication decrypting key ...

2017-07-23 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2475 Gently ping @1ambda ? Thanks. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled

[GitHub] zeppelin issue #2475: [ZEPPELIN-2757] Enhance Authentication decrypting key ...

2017-07-19 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2475 @1ambda I addressed your comment. Thanks. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this

[GitHub] zeppelin issue #2475: [ZEPPELIN-2757] Enhance Authentication decrypting key ...

2017-07-13 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2475 cc @Leemoonsoo @jongyoul --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and

[GitHub] zeppelin issue #2487: [ZEPPELIN-2769] Prevent SQL injection for GetUserList....

2017-07-13 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2487 cc @Leemoonsoo @jongyoul Would you mind to have a look? This is just an enhancement for preventing from SQL injection. Thanks. --- If your project is set up for it, you can reply to this

[GitHub] zeppelin pull request #2487: [ZEPPELIN-2769] Prevent SQL injection for GetUs...

2017-07-12 Thread yanboliang
GitHub user yanboliang opened a pull request: https://github.com/apache/zeppelin/pull/2487 [ZEPPELIN-2769] Prevent SQL injection for GetUserList.getUserList. ### What is this PR for? Prevent SQL injection for ```GetUserList.getUserList```. ### What type of PR is it

[GitHub] zeppelin pull request #2475: [ZEPPELIN-2757] Enhance Authentication decrypti...

2017-07-10 Thread yanboliang
Github user yanboliang closed the pull request at: https://github.com/apache/zeppelin/pull/2475 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature

[GitHub] zeppelin pull request #2475: [ZEPPELIN-2757] Enhance Authentication decrypti...

2017-07-10 Thread yanboliang
GitHub user yanboliang reopened a pull request: https://github.com/apache/zeppelin/pull/2475 [ZEPPELIN-2757] Enhance Authentication decrypting key generation. ### What is this PR for? Enhance ```Authentication``` decrypting key generation by random ```KeyGenerator

[GitHub] zeppelin pull request #2475: [ZEPPELIN-2757] Enhance Authentication decrypti...

2017-07-09 Thread yanboliang
GitHub user yanboliang opened a pull request: https://github.com/apache/zeppelin/pull/2475 [ZEPPELIN-2757] Enhance Authentication decrypting key generation. ### What is this PR for? Enhance ```Authentication``` decrypting key generation by random ```KeyGenerator

[GitHub] zeppelin issue #2468: [ZEPPELIN-2733] Remove System Information Leak in Auth...

2017-07-07 Thread yanboliang
Github user yanboliang commented on the issue: https://github.com/apache/zeppelin/pull/2468 @Leemoonsoo @soralee It passed CI test now. Thanks. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not

[GitHub] zeppelin pull request #2468: [ZEPPELIN-2733] Remove System Information Leak ...

2017-07-05 Thread yanboliang
GitHub user yanboliang opened a pull request: https://github.com/apache/zeppelin/pull/2468 [ZEPPELIN-2733] Remove System Information Leak in Authentication.java. ### What is this PR for? An information leak occurs when system data or debugging information leaves the program