Hello Team, Want to know about the more UDF Groov...
# general
r
Hello Team, Want to know about the more UDF Groovy security vulnerability. In documentation it is just mentioed that "*Allowing execuatable Groovy in queries can be a security vulnerability."* What are the security vulnerability? any safe way to use groovy based UDF? Thanks
m
Groovy based UDF allows for custom user defined code to be executed. Theoretically, if a user with ill intent somehow got onto your network and got credentials to access Pinot endpoint to make queries, they may create undesirable UDFs within groovy.