google / go-safeweb

Secure-by-default HTTP servers in Go.
Apache License 2.0
1.43k stars 81 forks source link

fetchmetadata: switch to configs for exceptions #300

Closed empijei closed 3 years ago

empijei commented 3 years ago

The fetchmetadata plugin dates back to when we didn't have configs.

This means that exceptions for the protection must currently be passed on construction instead of handler registration.

We should switch to the new mechanism.