From 6f5cd6c8ae4c924308bca1a5d5692081db89941c Mon Sep 17 00:00:00 2001 From: Jan Keith Darunday Date: Tue, 27 Aug 2024 20:50:35 +0800 Subject: [PATCH] Add documentation about http(s)://* whitelists (#135) --- reference/pear/configuration.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/reference/pear/configuration.md b/reference/pear/configuration.md index 48312d8..c2e9c13 100644 --- a/reference/pear/configuration.md +++ b/reference/pear/configuration.md @@ -130,6 +130,8 @@ By default in Pear apps, only requests to the sidecar host (127.0.0.1:9342) are Any Pear links that the app trusts to run (eg as a worker) must be added and any http(s) domains that the app wants to access must also be added, including localhost. +Adding `"https://*"` or `"http://*"` will trust all domains based on their respective protocol. + Note that this is only for requests that the Pear app makes itself such as loading assets. ```json @@ -166,7 +168,3 @@ An array of file paths to ignore relative to `package.json` file. ### `pear.previewFor ` Allows a Pear application to use a different Pear application's storage by referring to it's key. This can be useful for testing production storage with test versions of the application. - - - -