What I'm asking for is basically allowing the previously possible usage of -host 0.0.0.0 (as well as the IPv6 equivalent), while still rejecting requests with Origin headers (unless explicitly allowed).Ī sample use case is the provision of this Docker image:īy setting -host 0.0.0.0 in the image definition, users of the image can provision it without having to provide command-line arguments (ease of setup). I think it covers a wide variety of use cases, but not the one I outlined in my comment above:Ĭould we consider providing a configuration that allows connections from all network hosts (with all Host headers) while still rejecting requests with Origin headers other than localhost or those explicitly allowed?
0 kommentar(er)
