Fix host header attack
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
This commit is contained in:
@@ -35,6 +35,8 @@ public class HawkbitSecurityProperties {
|
||||
*/
|
||||
private boolean requireSsl;
|
||||
|
||||
private List<String> allowedHostNames;
|
||||
|
||||
/**
|
||||
* Basic authentication realm, see
|
||||
* https://tools.ietf.org/html/rfc2617#page-3 .
|
||||
@@ -49,6 +51,14 @@ public class HawkbitSecurityProperties {
|
||||
this.requireSsl = requireSsl;
|
||||
}
|
||||
|
||||
public List<String> getAllowedHostNames() {
|
||||
return allowedHostNames;
|
||||
}
|
||||
|
||||
public void setAllowedHostNames(final List<String> allowedHostNames) {
|
||||
this.allowedHostNames = allowedHostNames;
|
||||
}
|
||||
|
||||
public String getBasicRealm() {
|
||||
return basicRealm;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user