SWG-7517 updating the resolving options of swagger-parser-v3

Author: Milosz Tarka

modules/swagger-codegen/src/main/java/io/swagger/codegen/v3/config/CodegenConfigurator.java

@@ -34,10 +34,14 @@
 import java.nio.file.Path;
 import java.nio.file.Paths;
 import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.Collections;
 import java.util.HashMap;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
 import java.util.Set;
 import java.util.function.Predicate;
 
@@ -674,6 +678,21 @@ private ParseOptions buildParseOptions() {
         options.setFlatten(true);
         options.setFlattenComposedSchemas(flattenInlineSchema);
         options.setSkipMatches(this.skipInlineModelMatches);
+
+        if (Objects.equals(System.getenv("SAFELY_RESOLVE_URL"), "true")) {
+            List<String> allowList = Optional.ofNullable(System.getenv("REMOTE_REF_ALLOW_LIST"))
+                    .map(str -> Arrays.asList(str.split(",")))
+                    .orElseGet(Collections::emptyList);
+
+            List<String> blockList = Optional.ofNullable(System.getenv("REMOTE_REF_BLOCK_LIST"))
+                    .map(str -> Arrays.asList(str.split(",")))
+                    .orElseGet(Collections::emptyList);
+
+            options.setSafelyResolveURL(true);
+            options.setRemoteRefAllowList(allowList);
+            options.setRemoteRefBlockList(blockList);
+        }
+
         return options;
     }
 

pom.docker.xml

@@ -1116,7 +1116,7 @@
         <swagger-codegen-generators-version>1.0.40-SNAPSHOT</swagger-codegen-generators-version>
         <swagger-core-version>2.2.9</swagger-core-version>
         <swagger-core-version-v1>1.6.10</swagger-core-version-v1>
-        <swagger-parser-version>2.1.13</swagger-parser-version>
+        <swagger-parser-version>2.1.14-SNAPSHOT</swagger-parser-version>
         <swagger-parser-version-v1>1.0.65</swagger-parser-version-v1>
         <jackson-version>2.14.2</jackson-version>
         <jackson-databind-version>2.14.2</jackson-databind-version>

pom.java11.xml

@@ -1217,7 +1217,7 @@
         <swagger-codegen-generators-version>1.0.40-SNAPSHOT</swagger-codegen-generators-version>
         <swagger-core-version>2.2.9</swagger-core-version>
         <swagger-core-version-v1>1.6.10</swagger-core-version-v1>
-        <swagger-parser-version>2.1.13</swagger-parser-version>
+        <swagger-parser-version>2.1.14-SNAPSHOT</swagger-parser-version>
         <swagger-parser-version-v1>1.0.65</swagger-parser-version-v1>
         <jackson-version>2.14.2</jackson-version>
         <jackson-databind-version>2.14.2</jackson-databind-version>

pom.java8.xml

@@ -1220,7 +1220,7 @@
         <swagger-codegen-generators-version>1.0.40-SNAPSHOT</swagger-codegen-generators-version>
         <swagger-core-version>2.2.9</swagger-core-version>
         <swagger-core-version-v1>1.6.10</swagger-core-version-v1>
-        <swagger-parser-version>2.1.13</swagger-parser-version>
+        <swagger-parser-version>2.1.14-SNAPSHOT</swagger-parser-version>
         <swagger-parser-version-v1>1.0.65</swagger-parser-version-v1>
         <jackson-version>2.14.2</jackson-version>
         <jackson-databind-version>2.14.2</jackson-databind-version>

pom.xml

@@ -1217,7 +1217,7 @@
         <swagger-codegen-generators-version>1.0.40-SNAPSHOT</swagger-codegen-generators-version>
         <swagger-core-version>2.2.9</swagger-core-version>
         <swagger-core-version-v1>1.6.10</swagger-core-version-v1>
-        <swagger-parser-version>2.1.13</swagger-parser-version>
+        <swagger-parser-version>2.1.14-SNAPSHOT</swagger-parser-version>
         <swagger-parser-version-v1>1.0.65</swagger-parser-version-v1>
         <jackson-version>2.14.2</jackson-version>
         <jackson-databind-version>2.14.2</jackson-databind-version>