CLOUDP-298151: Fix SSRF Vulnerability in MongoDB Atlas CLI Integration #3600
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Proposed changes
Jira ticket: CLOUDP-298151
Closes #3599
Checklist
make fmt
and formatted my codeFurther comments
isSafeURL
function: This function validates that the URL provided is not an internal or unsafe address. It checks if the URL uses a safe scheme (e.g., http, https), and it ensures the host does not belong to known private IP ranges or local addresses.URL Validation in
CreateIntegration
: Before proceeding with the integration creation, the WebhookURL (or any URL input) is validated with theisSafeURL
function. If the URL is found to be unsafe, it returns an error and does not proceed with creating the integration.CWE-918