FreeOnePlus opened a new pull request, #129: URL: https://github.com/apache/doris-mcp-server/pull/129
## Summary - restrict Doris FE/BE HTTP calls to explicitly configured nodes and ports - reject metadata, link-local, malformed, redirected, and DNS-rebound destinations - enforce connect/read/total timeouts and bounded response bodies - route monitoring, query profile, trace lookup, and table-size HTTP calls through the shared policy - require an explicit BE monitoring allowlist instead of deriving outbound targets from SQL metadata - document the new configuration and add transport/regression coverage ## Validation - `pytest -q` — 597 passed, 63 skipped - HTTP and Stdio SSRF/protocol suite — 36 passed - real Doris Streamable HTTP and Stdio integration — 6 passed - Ruff, compileall, Bandit on the new HTTP boundary, and diff checks passed - `uv build` completed successfully -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
