tju-yxq commented on issue #1422: URL: https://github.com/apache/rocketmq-dashboard/issues/1422#issuecomment-5270111672
Follow-up audit note: This is fixed in current `rocketmq-studio`, and follow-up PR #2034 adds explicit service coverage that `http://127.0.0.1:9090` is rejected as a local/private data source URL. Verification result: `BUILD SUCCESS`; `Tests run: 9, Failures: 0, Errors: 0, Skipped: 0`. I updated the issue description to remove unverified live SSRF/internal-service probing claims. The current evidence is code inspection plus focused unit tests; no live exploit reproduction was run. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
