fuweng11 opened a new issue, #12133: URL: https://github.com/apache/inlong/issues/12133
### Description <img width="1386" height="485" alt="Image" src="https://github.com/user-attachments/assets/a04207bc-0478-4db5-8224-1651e89e703d"; /> Fix the security vulnerability in /api/cluster/testConnection. 1. Add @RequiresRoles to testConnection consistent with other data node management operations. 2. Extend UrlVerificationUtils to deny link-local, loopback, and RFC 1918 address ranges. 3. Configure RestTemplate instances used by HTTP-based operators to reject SSRF-prone targets before connecting. ### InLong Component InLong Manager ### Are you willing to submit PR? - [x] Yes, I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
