Repository navigation
Harden rules facade #2819
Description
Review all facades injected in the rules to ensure that they apply the proper restriction on functionality exposed to user.
Most importantly, restrict data access per scope of engine executing the rules.
Ensure there's test coverage.
Metadata
Metadata
Assignees
Labels
No labels
Activity
ebariaux commentedon Jun 3, 2026
manager/src/main/java/org/openremote/manager/rules/facade/WebhooksFacade.java:47 can build a target from an arbitrary webhook URL, which needs SSRF controls.
ebariaux commentedon Oct 26, 2026
Duplicate of #2675. The rules facade scoping work is consolidated there, including the related PRs, the asset sub-issues, and the WebhooksFacade review conclusion: no meaningful realm/asset scoping change is required for this outbound HTTP client. See #2675 for the remaining integration work.