DaanHoogland commented on code in PR #13821:
URL: https://github.com/apache/cloudstack/pull/13821#discussion_r3749434599


##########
server/src/main/java/org/apache/cloudstack/dns/DnsProviderManagerImpl.java:
##########
@@ -162,14 +163,29 @@ private DnsProvider getProviderByType(DnsProviderType 
type) {
         throw new CloudRuntimeException("No plugin found for DNS provider 
type: " + type);
     }
 
+    /**
+     * Rejects a DNS provider URL that resolves to an illegal address before 
any provider client is given
+     * the chance to connect to it. See {@link UriUtils#validateUrl(String)} 
for the exact rules enforced
+     * (including the requirement that the URL declares an {@code http}/{@code 
https} scheme).
+     * Expects {@code url} to already be trimmed.
+     */
+    private void validateDnsServerUrl(String url) {
+        if (StringUtils.isBlank(url)) {
+            return;
+        }
+        UriUtils.validateUrl(url);
+    }

Review Comment:
   I think this comment makes sense (cc @sudo87 ) however, implementing this 
like co-pilot suggests makes no sense. ftp: or mailto: or many other scheme 
prefixes would have to be checked. Would we accept any others than http-like 
ones? (ref https://en.wikipedia.org/wiki/List_of_URI_schemes) I wouldn’t mind 
dns: (not listed on the page I shared)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to