Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.9] Fix rare private ip address bypass SSRF issue #1081

Merged
merged 1 commit into from
Jul 12, 2023

Conversation

opensearch-trigger-bot[bot]
Copy link
Contributor

Backport e3cb2e3 from #1070

* Change connector access control creation allow empty list

Signed-off-by: zane-neo <[email protected]>

* Fix rare private ip address bypass SSRF issue

Signed-off-by: zane-neo <[email protected]>

---------

Signed-off-by: zane-neo <[email protected]>
(cherry picked from commit e3cb2e3)
@codecov
Copy link

codecov bot commented Jul 12, 2023

Codecov Report

Merging #1081 (3faa35f) into 2.9 (9095c44) will decrease coverage by 0.01%.
The diff coverage is 62.96%.

@@             Coverage Diff              @@
##                2.9    #1081      +/-   ##
============================================
- Coverage     77.34%   77.33%   -0.01%     
- Complexity     2054     2061       +7     
============================================
  Files           167      167              
  Lines          8532     8555      +23     
  Branches        846      855       +9     
============================================
+ Hits           6599     6616      +17     
  Misses         1555     1555              
- Partials        378      384       +6     
Flag Coverage Δ
ml-commons 77.33% <62.96%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
...arch/ml/engine/httpclient/MLHttpClientFactory.java 63.15% <62.96%> (+1.39%) ⬆️

... and 1 file with indirect coverage changes

@rbhavna rbhavna merged commit f67d3d2 into 2.9 Jul 12, 2023
@github-actions github-actions bot deleted the backport/backport-1070-to-2.9 branch July 12, 2023 02:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants