Aias00 commented on PR #7868: URL: https://github.com/apache/shenyu/pull/7868#issuecomment-6355717331
Merged. Heads-up for a follow-up: because the CodeQL alert was not suppressed in this PR, it will surface on `master` as a new critical SSRF finding in the security tab. It is a false positive (the URL is already validated and the resolved addresses are pinned), so it is worth a small follow-up that adds the `// codeql[java/ssrf]` justification comment, or a dismissal on the alert itself. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
