RockteMQ-AI commented on issue #2338: URL: https://github.com/apache/rocketmq-dashboard/issues/2338#issuecomment-5323888377
**Issue Evaluation** Category: (security) | Status: **Needs Info** Thank you for reporting this potential SSRF concern. However, after reviewing the current codebase on the branch, I could not find the described functionality: - No endpoint or proxy configuration reload mechanism exists in or . - The interface only exposes — there is no HTTP-based reload call. - The endpoint adds addresses to an in-memory list but does not trigger outbound HTTP requests. Could you clarify: - [ ] Which version/tag or branch contains the described proxy reload feature? - [ ] Is this based on a planned PR or a fork-specific change? Without the relevant code path, I cannot verify the reported vulnerability. --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
