CenterEdge / Positron

HTML 5 UI system for .Net, using Chromium and MVC 6
Apache License 2.0
83 stars 19 forks source link

Allow customization of resource filtering for security #6

Closed brantburnett closed 7 years ago

brantburnett commented 7 years ago

Motivation

Current security paradigm blocks all traffic out of Chromium except for traffic to the internal Positron server. This is great for security, but limiting.

Modifications

Implement IResourceRequestFilter abstraction layer on top of the OnBeforeResourceLoad method of RequestHandler.

Add a base class, HostResourceRequestFilter, which can be used to easily implement simple filtering.

Implement the current functionality in PositronOnlyResourceRequestFilter, which is the registered filter by default.

Add a test link to the test application.

Results

Current behavior is unchanged, but users may now relax the filtering restrictions as desired. API is asynchronous in case external sources need to be consulted before allowing traffic.

brantburnett commented 7 years ago

:white_check_mark: Build Positron 0.2.0.4 completed (commit https://github.com/CenterEdge/Positron/commit/720687a127 by @brantburnett)

brantburnett commented 7 years ago

:white_check_mark: Build Positron 0.2.0.4 completed (commit https://github.com/CenterEdge/Positron/commit/720687a127 by @brantburnett)