-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
enhancementNew feature or requestNew feature or requestprio/1Low priority. "Nice to have"Low priority. "Nice to have"
Description
Summary
We want to add a configurable whitelist for the base URLs sent from iver-wharf/wharf-web to this provider plugin.
Motivation
If the base URL is provided by the end-user, there is the possibility for a security vulnerability. By whitelisting URLs we protect ourselves from this.
As an extra, having this list also opens up the possibility to provide a drop down list for the base URLs over at iver-wharf/wharf-web, should we want to have that in the future.
Example config file
# config.yaml
providerBaseURLWhitelist:
- https://dev.azure.com/
Previous discussion
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestprio/1Low priority. "Nice to have"Low priority. "Nice to have"