aboutsummaryrefslogtreecommitdiff
path: root/conf
diff options
context:
space:
mode:
authorJoe Chen <jc@unknwon.io>2022-03-14 22:06:08 +0800
committerGitHub <noreply@github.com>2022-03-14 22:06:08 +0800
commit714383a063f64fcc7c6a458182c4f9cf5a46df66 (patch)
treeebed76f917e9817cd78c4dda07813f93f3bb16bd /conf
parenta2c632526111b3333de482c69709a7ca70a173f8 (diff)
conf: add allowlist for accessing local network (#6842)
Diffstat (limited to 'conf')
-rw-r--r--conf/app.ini2
-rw-r--r--conf/locale/locale_en-US.ini1
2 files changed, 3 insertions, 0 deletions
diff --git a/conf/app.ini b/conf/app.ini
index d1227a28..6ae3dd1c 100644
--- a/conf/app.ini
+++ b/conf/app.ini
@@ -173,6 +173,8 @@ COOKIE_SECURE = false
ENABLE_LOGIN_STATUS_COOKIE = false
; The cookie name to store user login status.
LOGIN_STATUS_COOKIE_NAME = login_status
+; A comma separated list of hostnames that are explicitly allowed to be accessed within the local network.
+LOCAL_NETWORK_ALLOWLIST =
[email]
; Whether to enable the email service.
diff --git a/conf/locale/locale_en-US.ini b/conf/locale/locale_en-US.ini
index 4f038fec..5ad18949 100644
--- a/conf/locale/locale_en-US.ini
+++ b/conf/locale/locale_en-US.ini
@@ -1248,6 +1248,7 @@ config.security.cookie_secure = Enable secure cookie
config.security.reverse_proxy_auth_user = Reverse proxy authentication header
config.security.enable_login_status_cookie = Enable login status cookie
config.security.login_status_cookie_name = Login status cookie
+config.security.local_network_allowlist = Local network allowlist
config.email_config = Email configuration
config.email.enabled = Enabled