Class IntakeSecurityScanner

java.lang.Object

ai.pipeline.connector.intake.security.IntakeSecurityScanner

@ApplicationScoped
public class IntakeSecurityScanner
extends Object

Pre-acceptance security screening for uploads.

Today it enforces a configurable blocked-file-extension policy: an upload whose filename or source path/URI ends in a blocked extension is rejected as IntakeErrorCode.UNSUPPORTED_MEDIA_TYPE (proto REJECTION_REASON_UNSUPPORTED_TYPE). The check is case-insensitive, honors compound extensions (e.g. tar.gz), strips URI query/fragment, and so catches double-extension tricks like report.pdf.exe.

It is deliberately structured as a generic scan: content-based checks — e.g. malware/virus scanning or MIME sniffing — would be added as additional steps inside evaluate(SecurityScanTarget) returning a IntakeSecurityScanner.ScanVerdict, with no change to any call site. No content scanning is performed yet.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	IntakeSecurityScanner.ScanVerdict	Outcome of a security scan: allowed, or a client-safe rejection code + message.

Constructor Summary

Constructors

Constructor	Description
IntakeSecurityScanner()

Method Summary

Modifier and Type	Method	Description
void	enforce(SecurityScanTarget target)	Throwing form for the HTTP and unary gRPC paths: a rejection becomes a client-safe HttpIntakeException.
IntakeSecurityScanner.ScanVerdict	evaluate(SecurityScanTarget target)	Decision form for the streaming path, which surfaces rejections in-band.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

IntakeSecurityScanner

public IntakeSecurityScanner()

Method Details

enforce

public void enforce(SecurityScanTarget target)

Throwing form for the HTTP and unary gRPC paths: a rejection becomes a client-safe HttpIntakeException.

evaluate

public IntakeSecurityScanner.ScanVerdict evaluate(SecurityScanTarget target)

Decision form for the streaming path, which surfaces rejections in-band.