[SergeyMenshykh]

Motivation and Context

Improve consistency and maintainability of HTTP request validation in the .NET and Python SDKs.

Description

• Extract existing request validation into shared internal utilities and reuse them in the HTTP plugins.
• Update HTTP plugin configuration and documentation.
• Extend unit coverage for shared validation and plugin behavior.

Contribution Checklist

• The code builds clean without any errors or warnings
• The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
• All unit tests pass, and I have added new tests where possible
• I didn't break anyone 😄

[Copilot]

Copilot review overview

🟡 Changes recommended

Both validators permit the non-public IPv6 site-local range fec0::/10, leaving an SSRF bypass.

Review effort: Balanced
Findings: 2

Open (2)

• Block deprecated IPv6 site-local range fec0::/10 · New
• Reject IPv6 site-local addresses in SSRF validation · New

What changed in this PR

Introduces shared public-network validation utilities across .NET and Python and applies them to HTTP plugins.

Changes:

• Extracts shared DNS and non-public IP validation.
• Adds explicit private-network opt-ins to HTTP plugins.
• Expands validation and plugin tests.

File	Description
python/​tests/​unit/​core_plugins/​test_http_plugin.py	Tests DNS, IP, IDNA, and opt-in behavior.
python/​tests/​unit/​connectors/​openapi_plugin/​test_server_url_validator.py	Tests explicit hostname allowlisting.
python/​semantic_kernel/​utils/​public_network_address_validator.py	Adds shared Python network validation.
python/​semantic_kernel/​core_plugins/​http_plugin.py	Applies validation to HTTP requests.
python/​semantic_kernel/​connectors/​openapi_plugin/​server_url_validator.py	Reuses the shared Python validator.
dotnet/​src/​Plugins/​Plugins.UnitTests/​Core/​HttpPluginTests.cs	Tests .NET plugin network restrictions.
dotnet/​src/​Plugins/​Plugins.Core/​HttpPlugin.cs	Adds private-network controls and validation.
dotnet/​src/​InternalUtilities/​src/​Http/​PublicNetworkAddressValidator.cs	Adds shared .NET network validation.
dotnet/​src/​Functions/​Functions.UnitTests/​OpenApi/​ServerUrlValidatorTests.cs	Expands shared-validator coverage.
dotnet/​src/​Functions/​Functions.OpenApi/​ServerUrlValidator.cs	Reuses the shared .NET validator.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Python Test Coverage Report •

File	Stmts	Miss	Cover	Missing
connectors/openapi_plugin
server_url_validator.py	65	7	89%	83–84, 95, 97, 99, 108, 113
core_plugins
http_plugin.py	84	0	100%
utils
public_network_address_validator.py	98	2	97%	41, 83
TOTAL	29121	5484	81%

Python Unit Test Overview

Tests	Skipped	Failures	Errors	Time
4455	22 💤	0 ❌	0 🔥	2m 23s ⏱️

[semantic-kernel-automation]

MAF Automated Review — Iteration 1

Result: Findings reported
Scope: full PR (1 commit(s)): eabe49f57c4c
Model: gpt-5.6-sol

Overview

The PR consolidates destination validation across .NET and Python and adds fail-closed DNS/address checks to the HTTP plugins, backed by domain gates, redirect controls, all-answer validation, and broad unit coverage. Two Medium residual risks remain: the approved DNS result is not bound to the actual connection, and deprecated site-local IPv6 destinations fall through as public in both implementations.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
2 verified findings remained after source verification (2 medium) across 1 file. Details are attached to the affected lines below.

Affected areas: dotnet/src/InternalUtilities/src/Http/PublicNetworkAddressValidator.cs

[Eduard van Valkenburg (eavanvalkenburg)]

Small nit, but python side approved