Michael Smith has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/24770 )

Change subject: IMPALA-15217: Add guards for avro.schema.url
......................................................................

IMPALA-15217: Add guards for avro.schema.url

Adds CLI flags `avro_schema_url_allowed_schemes`,
`avro_schema_url_remote_http_enabled`, and
`avro_schema_url_http_allowed_hosts` to provide additional guards on
sending HTTP requests to unexpected hosts or reading from remote
filesystems.

Also protects against HTTP redirects and hung connections.

Adds support for HTTPS Avro schema URLs.

Assisted-by: Claude Sonnet 4.6 (VSCode)
Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
Reviewed-on: http://gerrit.cloudera.org:8080/24770
Reviewed-by: Joe McDonnell <[email protected]>
Tested-by: Michael Smith <[email protected]>
---
M be/src/util/backend-gflag-util.cc
M common/thrift/BackendGflags.thrift
M fe/src/main/java/org/apache/impala/service/BackendConfig.java
M fe/src/main/java/org/apache/impala/util/AvroSchemaUtils.java
M tests/authorization/test_avro_schema_url.py
A tests/custom_cluster/test_avro_schema_url_flags.py
6 files changed, 251 insertions(+), 24 deletions(-)

Approvals:
  Joe McDonnell: Looks good to me, approved
  Michael Smith: Verified

--
To view, visit http://gerrit.cloudera.org:8080/24770
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: branch-4.5.2
Gerrit-MessageType: merged
Gerrit-Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
Gerrit-Change-Number: 24770
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Joe McDonnell <[email protected]>
Gerrit-Reviewer: Michael Smith <[email protected]>
Gerrit-Reviewer: Steve Carlin <[email protected]>

Reply via email to