Add a configurable network access-control policy for outbound definition and endpoint fetches - #13926

Open

IsuruGunarathne wants to merge 14 commits into

wso2:masterfrom

IsuruGunarathne:feature_nw_access_control

Commits on Aug 23, 2026

Add configurable outbound host validation

JanithaSampathBandara
authored and
IsuruGunarathne
committed
ee365d5
Fix missing mock setup in testValidateValidExternalEndpoints

JanithaSampathBandara
authored and
IsuruGunarathne
committed
0f166e6
Address code review: URI parsing, schema enum, and endpoint URL guards

JanithaSampathBandara
authored and
IsuruGunarathne
committed
4b72f3d
Gate remote OpenAPI/Swagger $ref resolution through the network access-control policy
IsuruGunarathne
committed
1f49e61
Gate remote and archive-escaping WSDL schema-import fetches through the network access-control policy
IsuruGunarathne
committed
ae0d386
Address review feedback on the network access-control changes
IsuruGunarathne
committed
4de8c67
Address review feedback on network access-control gating
IsuruGunarathne
committed
1348deb
Harden network access-control gating and fix the SOAP-extractor test
IsuruGunarathne
committed
9ad17d0
Confine OpenAPI archive references and refine Key Manager URL validation
IsuruGunarathne
committed
8c35e4a
Restore shared ServiceReferenceHolder state after the WSDL access-control tests
IsuruGunarathne
committed
b28d675
Move the network access-control config to the server namespace
IsuruGunarathne
committed
00a8ce8
Address review comments on the network access-control checks
IsuruGunarathne
committed
ed494c8
Reword nested WSDL schema resolution failure logs
IsuruGunarathne
committed
6be96df
Use generic wording for blocked remote URL and reference errors
IsuruGunarathne
committed
0da678b

Navigation Menu

Uh oh!

Add a configurable network access-control policy for outbound definition and endpoint fetches - #13926

Add a configurable network access-control policy for outbound definition and endpoint fetches#13926
IsuruGunarathne wants to merge 14 commits into
wso2:masterfrom
IsuruGunarathne:feature_nw_access_control

Commits on Aug 23, 2026

Add configurable outbound host validation

Fix missing mock setup in testValidateValidExternalEndpoints

Address code review: URI parsing, schema enum, and endpoint URL guards

Gate remote OpenAPI/Swagger $ref resolution through the network access-control policy

Gate remote and archive-escaping WSDL schema-import fetches through the network access-control policy

Address review feedback on the network access-control changes

Address review feedback on network access-control gating

Harden network access-control gating and fix the SOAP-extractor test

Confine OpenAPI archive references and refine Key Manager URL validation

Restore shared ServiceReferenceHolder state after the WSDL access-control tests

Move the network access-control config to the server namespace

Address review comments on the network access-control checks

Reword nested WSDL schema resolution failure logs

Use generic wording for blocked remote URL and reference errors