Skip to content

Preventing Malicious Groovy Script Execution with Static Analysis #14995

@abhishekbafna

Description

@abhishekbafna

Apache Pinot allows Groovy scripts for data manipulation during ingestion and queries. However, malicious actors could exploit this feature to execute harmful code on the Pinot infrastructure. To prevent this, static analysis can be used to inspect Groovy scripts and expressions before execution.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions