yyqdbngt opened a new pull request, #3900: URL: https://github.com/apache/rocketmq-dashboard/pull/3900
### Motivation The `UrlHostGuard` SSRF guard only had a single multicast test even though it implements the shared fail-closed policy for data-source and LLM-gateway URLs. This PR grows the suite from 1 to 12 cases. ### Changes - Blank/null hosts fail closed. - Any-local and metadata addresses (`0.0.0.0`, `::`, `169.254.169.254`, `fd00:ec2::254`) are rejected. - Loopback admission is gated on the `allowLoopback` flag for `localhost`, `127.0.0.1`, and `::1`. - A trailing dot is stripped before classification. - Private site-local ranges (`10.x`, `172.16-31.x`, `192.168.x`) stay allowed. - `check` rejects missing/blank URLs, non-http(s) schemes, and hostless URLs, and admits trimmed http(s) URLs to private hosts. ### Verification - `mvn -B test -Dtest=UrlHostGuardMulticastTest`: 12/12 passed, BUILD SUCCESS -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
