fix(security): 私有上游 - 支持精确主机白名单

2026-07-22 21:25:41 +08:00
parent 277aba44bb
commit ef65839c9d
8 changed files with 52 additions and 3 deletions
--- a/docker-compose.local.yml
+++ b/docker-compose.local.yml
@@ -14,6 +14,7 @@ services:
      REDIS_URL: ${REDIS_URL:-}
      CANVAS_REGISTRATION_ENABLED: ${CANVAS_REGISTRATION_ENABLED:-false}
      CANVAS_ALLOW_PRIVATE_UPSTREAMS: ${CANVAS_ALLOW_PRIVATE_UPSTREAMS:-false}
+      CANVAS_ALLOWED_PRIVATE_UPSTREAM_HOSTS: ${CANVAS_ALLOWED_PRIVATE_UPSTREAM_HOSTS:-}
      CANVAS_CORS_ORIGINS: ${CANVAS_CORS_ORIGINS:-http://localhost:3000}
      GIN_MODE: release
    volumes: