apache / apache/pinot

Disallow groovy script in SQL statements to prevent possible exploitation.

Open
#7,310 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
6.1k
Forks
1.5k
Avg merge
2d 3h
Merged PRs (30d)
195

Description

We would like to disable the ability to run groovy scripts in SQL statements with an option to enable groovy scripts by setting a configuration variable.

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by locating SQL statement handling and the configuration system that governs optional features, then trace how Groovy scripts are executed. Done means Groovy execution is disabled by default, can be explicitly enabled through configuration, and the behavior is covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
groovy, java, sql
Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.