Hello Team,
Want to know about the more UDF Groovy security vulnerability. In documentation it is just mentioed that "*Allowing execuatable Groovy in queries can be a security vulnerability."*
What are the security vulnerability? any safe way to use groovy based UDF?
Thanks
m
Mayank
09/08/2022, 3:41 AM
Groovy based UDF allows for custom user defined code to be executed. Theoretically, if a user with ill intent somehow got onto your network and got credentials to access Pinot endpoint to make queries, they may create undesirable UDFs within groovy.