Files
gristlabs_grist-core/app/server/lib
Paul Fitzpatrick 3f3a0d3aa1 (core) support a wildcard option for ALLOWED_WEBHOOK_DOMAINS
Summary:
Now that webhook payload delivery can be done using a proxy,
it may be desirable to no longer require a set of `ALLOWED_WEBHOOK_DOMAINS`.
This diff allows this variable to be set to `*`. With this setting,
any domain, and both `http` and `https` protocols will now be accepted.

Another possibility would be to default to unchecked
behavior if `ALLOWED_WEBHOOK_DOMAINS` is not set. But this would
introduce a new kind of vulnerability to unconfigured Grist
installations.

Test Plan: switched a test from naming a domain to using `*`

Reviewers: jarek

Reviewed By: jarek

Differential Revision: https://phab.getgrist.com/D3903
2023-05-23 13:40:52 -04:00
..
2022-02-19 09:46:49 +00:00
2023-05-19 13:06:15 -04:00
2023-05-19 13:06:15 -04:00
2023-05-19 13:06:15 -04:00
2023-05-19 13:06:15 -04:00
2022-09-29 18:02:09 +02:00
2023-05-19 13:06:15 -04:00
2023-01-26 09:47:14 +01:00
2022-02-19 09:46:49 +00:00
2022-02-19 09:46:49 +00:00
2022-07-04 10:42:40 -04:00
2023-04-06 12:34:54 -04:00
2022-06-17 21:53:20 +02:00
2022-12-22 12:58:39 -05:00
2023-02-20 22:46:36 -05:00
2022-07-04 10:42:40 -04:00
2023-04-03 13:29:35 -04:00
2022-07-04 10:42:40 -04:00
2020-07-21 20:39:10 -04:00
2022-04-01 15:24:19 -07:00
2023-04-06 12:34:54 -04:00
2022-07-04 10:42:40 -04:00
2023-05-19 13:06:15 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2022-08-25 12:38:36 -07:00