deislabs / wasi-experimental-http

Experimental outbound HTTP support for WebAssembly and WASI
MIT License
136 stars 33 forks source link

Check origin as opposed to only the host #87

Open radu-matei opened 2 years ago

radu-matei commented 2 years ago

@lann pointed out that currently we only check the host when verifying the guest can make an outbound HTTP request:

https://github.com/deislabs/wasi-experimental-http/blob/4591a4814a66289ea6cc6c4721eba27d623197a0/crates/wasi-experimental-http-wasmtime/src/lib.rs#L617

This should check the origin instead.