Skip to content

Add configurable whitelist for remote provider base URLs #19

@Alexamakans

Description

@Alexamakans

Summary

We want to add a configurable whitelist for the base URLs sent from iver-wharf/wharf-web to this provider plugin.

Motivation

If the base URL is provided by the end-user, there is the possibility for a security vulnerability. By whitelisting URLs we protect ourselves from this.

As an extra, having this list also opens up the possibility to provide a drop down list for the base URLs over at iver-wharf/wharf-web, should we want to have that in the future.

Example config file

# config.yaml
providerBaseURLWhitelist:
  - https://dev.azure.com/

Previous discussion

#14 (comment)

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestprio/1Low priority. "Nice to have"

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions