ShenYu Admin Cluster #5448

apache · Apr 24, 2024 · 664b79b · 664b79b
1 parent 443eafa
commit 664b79b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/shenyu-admin/src/main/java/org/apache/shenyu/admin/filter/ClusterForwardFilter.java b/shenyu-admin/src/main/java/org/apache/shenyu/admin/filter/ClusterForwardFilter.java
@@ -107,6 +107,9 @@ private void forwardRequest(final HttpServletRequest request, final HttpServletR
         HttpHeaders headers = new HttpHeaders();
         copyHeaders(request, headers);
         HttpEntity<byte[]> requestEntity = new HttpEntity<>(getBody(request), headers);
+        if (!(clusterMasterService.getMasterUrl() + request.getRequestURI()).equals(url)) {
+            throw new IllegalArgumentException("Invalid URL");
+        }
         String urlWithParams = url;
         if (StringUtils.isNotEmpty(request.getQueryString())) {
             urlWithParams += "?" + request.getQueryString();