Skip to content

[Improve][Manager] Fix SSRF in DataNode testConnection #12193

Description

@fuweng11

Description

POST /api/node/testConnection is vulnerable to SSRF. DataNodeServiceImpl.testConnection only validates DataNodeRequest.url via UrlVerificationUtils.validateUrlNotInternal, but each operator connects using its own field, which is never validated.

InLong Component

InLong Manager

Are you willing to submit PR?

  • Yes, I am willing to submit a PR!

Code of Conduct

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions