Apache druid security
Security practices and vulnerability patching for Apache Druid, focusing on JavaScript sandbox configuration.From its SKILL.md
npx -y skills add cxcscmu/SkillLearnBench --skill apache-druid-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
SKILL.md
0.9 KB, 141 tokens by cl100k_base, as published. Nobody here has run it
Apache Druid Security Patching
When patching vulnerabilities related to arbitrary code execution in Druid via JavaScript filters or samplers:
- Identify the vulnerability point: Look for where JavaScript is evaluated (e.g.,
JavaScriptFilter,JavaScriptFunction). - Review sandbox settings: Check how
JavascriptConfigis initialized and enforced. Ensure that enabling JavaScript (enabled: true) is not allowing bypasses via unexpected configurations or null keys. - Impose Restrictions: Modify the logic to strictly require explicit approval for dangerous operations, or block them entirely by default.
- Testing: Create a regression test that mimics the exploit payload to ensure the fix is effective.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.