backend-common: lock down UrlReader to only read from allowed URLs

2021-01-18 13:17:50 +01:00
parent a669e2dd0f
commit 5345a1f983
9 changed files with 163 additions and 41 deletions
@@ -16,6 +16,10 @@ backend:
    credentials: true
  csp:
    connect-src: ["'self'", 'http:', 'https:']
+  reading:
+    allow:
+      - host: example.com
+      - host: '*.mozilla.org'
  # workingDirectory: /tmp # Use this to configure a working directory for the scaffolder, defaults to the OS temp-dir

 # See README.md in the proxy-backend plugin for information on the configuration format