download-whitelist verified
The only addresses allowed
in the configuration this is a line
download-whitelist: Address ranges resources may be fetched from, to the exclusion of everything else; empty, so no such restriction applies.
Values
- Values
comma-separated ranges- Default
· taken from the build- applying
restart required- where it can be set
in the config file · with a startup flag · as an environment variable
In detail
The stricter counterpart of the blacklist and the right tool when the set of legitimate sources is known — a customer whose images all live on their own CDN. Empty by default, which means the blacklist is doing the work alone.