fix(安全): 允许在禁用白名单时使用不安全的 HTTP URL

This commit is contained in:
yangjianbo
2026-01-05 16:09:42 +08:00
parent ee6d01fd1c
commit c4628d4604

View File

@@ -80,7 +80,7 @@ security:
allow_private_hosts: true allow_private_hosts: true
# Allow http:// URLs when allowlist is disabled (default: false, require https) # Allow http:// URLs when allowlist is disabled (default: false, require https)
# 白名单禁用时是否允许 http:// URL默认: false要求 https # 白名单禁用时是否允许 http:// URL默认: false要求 https
allow_insecure_http: false allow_insecure_http: true
response_headers: response_headers:
# Enable configurable response header filtering (disable to use default allowlist) # Enable configurable response header filtering (disable to use default allowlist)
# 启用可配置的响应头过滤(禁用则使用默认白名单) # 启用可配置的响应头过滤(禁用则使用默认白名单)