Michael Smith has uploaded this change for review. ( http://gerrit.cloudera.org:8080/24797
Change subject: IMPALA-15219: Enforce strict validation for AI endpoint hostnames ...................................................................... IMPALA-15219: Enforce strict validation for AI endpoint hostnames The AiFunctions currently validates allowed AI endpoints using a simple substring match (gstrncasestr). This can allow improperly formatted or malicious URLs to pass validation if they contain the target domain string in the path. This commit makes the validation stricter and more robust by enforcing structural hostname matching: 1. Added a helper ExtractHost() to parse the URL and isolate the canonical hostname. 2. Added a helper IsHostMatch() to perform exact domain and strict subdomain matching against the allowed endpoint list. 3. Updated GetAiPlatformFromEndpoint() to evaluate the exact host using the new helper functions, ensuring malicious URLs are rejected as unsupported. Testing: Added test cases to AiFunctionsTest and AiFunctionsTestAdditionalSites to ensure that URLs with target domains hidden in paths are correctly rejected. Change-Id: I5481dec7d798dc6ca7273b0028b9317ab69c39f5 --- M be/src/exprs/ai-functions-ir.cc M be/src/exprs/expr-test.cc 2 files changed, 69 insertions(+), 17 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/97/24797/1 -- To view, visit http://gerrit.cloudera.org:8080/24797 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I5481dec7d798dc6ca7273b0028b9317ab69c39f5 Gerrit-Change-Number: 24797 Gerrit-PatchSet: 1 Gerrit-Owner: Michael Smith <[email protected]>
