Michael Smith has uploaded this change for review. ( 
http://gerrit.cloudera.org:8080/24770


Change subject: IMPALA-15217: Add guards for avro.schema.url
......................................................................

IMPALA-15217: Add guards for avro.schema.url

Adds CLI flags `avro_schema_url_allowed_schemes`,
`avro_schema_url_remote_http_enabled`, and
`avro_schema_url_http_allowed_hosts` to provide additional guards on
sending HTTP requests to unexpected hosts or reading from remote
filesystems.

Also protects against HTTP redirects and hung connections.

Adds support for HTTPS Avro schema URLs.

Assisted-by: Claude Sonnet 4.6 (VSCode)
Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
---
M be/src/util/backend-gflag-util.cc
M common/thrift/BackendGflags.thrift
M fe/src/main/java/org/apache/impala/service/BackendConfig.java
M fe/src/main/java/org/apache/impala/util/AvroSchemaUtils.java
M tests/authorization/test_avro_schema_url.py
A tests/custom_cluster/test_avro_schema_url_flags.py
6 files changed, 251 insertions(+), 24 deletions(-)



  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/70/24770/1
--
To view, visit http://gerrit.cloudera.org:8080/24770
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: branch-4.5.2
Gerrit-MessageType: newchange
Gerrit-Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
Gerrit-Change-Number: 24770
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Smith <[email protected]>

Reply via email to