diff --git a/Dockerfile b/Dockerfile index c702e666..20a645e7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -60,7 +60,7 @@ RUN \ # Fetch gvisor-based sandbox. Note, to enable it to run within default # unprivileged docker, layers of protection that require privilege have # been stripped away, see https://github.com/google/gvisor/issues/4371 -FROM gristlabs/gvisor-unprivileged:buster as sandbox +FROM docker.io/gristlabs/gvisor-unprivileged:buster as sandbox ################################################################################ ## Run-time stage diff --git a/README.md b/README.md index a49e0b30..2af173f6 100644 --- a/README.md +++ b/README.md @@ -267,11 +267,11 @@ GRIST_DOMAIN | in hosted Grist, Grist is served from subdomains of this d GRIST_EXPERIMENTAL_PLUGINS | enables experimental plugins GRIST_ENABLE_REQUEST_FUNCTION | enables the REQUEST function. This function performs HTTP requests in a similar way to `requests.request`. This function presents a significant security risk, since it can let users call internal endpoints when Grist is available publicly. This function can also cause performance issues. Unset by default. GRIST_HIDE_UI_ELEMENTS | comma-separated list of UI features to disable. Allowed names of parts: `helpCenter,billing,templates,createSite,multiSite,multiAccounts,sendToDrive,tutorials`. If a part also exists in GRIST_UI_FEATURES, it will still be disabled. -GRIST_HOME_INCLUDE_STATIC | if set, home server also serves static resources GRIST_HOST | hostname to use when listening on a port. GRIST_HTTPS_PROXY | if set, use this proxy for webhook payload delivery. GRIST_ID_PREFIX | for subdomains of form o-*, expect or produce o-${GRIST_ID_PREFIX}*. GRIST_IGNORE_SESSION | if set, Grist will not use a session for authentication. +GRIST_INCLUDE_CUSTOM_SCRIPT_URL | if set, will load the referenced URL in a `