fix: codeql issue fix - add function to determine if span name contains a Cosmos DB host

Author: Avijit-Microsoft

src/api/common/logging/span_filters.py

@@ -3,6 +3,8 @@
 """
 
 import logging
+from urllib.parse import urlparse
+
 from opentelemetry.sdk.trace import SpanProcessor, ReadableSpan
 from opentelemetry.trace import SpanContext, TraceFlags
 
@@ -24,6 +26,20 @@ def _unsample(span: ReadableSpan) -> None:
         logger.debug("Unable to unsample span %s: %s", span.name, e)
 
 
+def _is_cosmos_host(span_name: str) -> bool:
+    """
+    Safely determine if the span name contains a Cosmos DB host.
+    """
+    try:
+        parsed = urlparse(span_name)
+        host = parsed.hostname or ""
+
+        return host == "documents.azure.com" or host.endswith(".documents.azure.com")
+    except Exception as e:
+        logger.debug("Failed to parse span name '%s': %s", span_name, e)
+        return False
+
+
 class DropASGIResponseBodySpanProcessor(SpanProcessor):
     """
     Filters out ASGI http.response.body internal dependency spans from Application Insights.
@@ -72,8 +88,7 @@ def on_end(self, span: ReadableSpan) -> None:
         span_name = span.name or ""
         if (
             attrs.get("db.system") == "cosmosdb"
-            or ".documents.azure.com" in span_name
-            or span_name.endswith("documents.azure.com")
+            or _is_cosmos_host(span_name)
         ):
             _unsample(span)