Michael Smith has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/24801 )

Change subject: IMPALA-15217: Add guards for avro.schema.url
......................................................................

IMPALA-15217: Add guards for avro.schema.url

Adds CLI flags `avro_schema_url_allowed_schemes`,
`avro_schema_url_remote_http_enabled`, and
`avro_schema_url_http_allowed_hosts` to provide additional guards on
sending HTTP requests to unexpected hosts or reading from remote
filesystems.

Also protects against HTTP redirects and hung connections.

Adds support for HTTPS Avro schema URLs.

Assisted-by: Claude Sonnet 4.6 (VSCode)
Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
Reviewed-on: http://gerrit.cloudera.org:8080/24801
Reviewed-by: Michael Smith <[email protected]>
Tested-by: Michael Smith <[email protected]>
---
M be/src/util/backend-gflag-util.cc
M common/thrift/BackendGflags.thrift
M fe/src/main/java/org/apache/impala/service/BackendConfig.java
M fe/src/main/java/org/apache/impala/util/AvroSchemaUtils.java
M tests/authorization/test_avro_schema_url.py
A tests/custom_cluster/test_avro_schema_url.py
6 files changed, 249 insertions(+), 22 deletions(-)

Approvals:
  Michael Smith: Looks good to me, approved; Verified

--
To view, visit http://gerrit.cloudera.org:8080/24801
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I72c331ea53170644c4b2234b61dbdd880ea23e55
Gerrit-Change-Number: 24801
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <[email protected]>
Gerrit-Reviewer: Csaba Ringhofer <[email protected]>
Gerrit-Reviewer: Fang-Yu Rao <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Joe McDonnell <[email protected]>
Gerrit-Reviewer: Michael Smith <[email protected]>
Gerrit-Reviewer: Peter Rozsa <[email protected]>
Gerrit-Reviewer: Sai Hemanth Gantasala <[email protected]>
Gerrit-Reviewer: Zoltan Borok-Nagy <[email protected]>

Reply via email to