Open radu-matei opened 2 years ago
@lann pointed out that currently we only check the host when verifying the guest can make an outbound HTTP request:
https://github.com/deislabs/wasi-experimental-http/blob/4591a4814a66289ea6cc6c4721eba27d623197a0/crates/wasi-experimental-http-wasmtime/src/lib.rs#L617
This should check the origin instead.
@lann pointed out that currently we only check the host when verifying the guest can make an outbound HTTP request:
https://github.com/deislabs/wasi-experimental-http/blob/4591a4814a66289ea6cc6c4721eba27d623197a0/crates/wasi-experimental-http-wasmtime/src/lib.rs#L617
This should check the origin instead.