storacha / w3link

🪐 The IPFS gateway for web3.storage is not "another gateway", but a caching layer that sits on top of existing IPFS public gateways.
Other
24 stars 9 forks source link

fix: dotstorage apis not excepted from csp #42

Closed vasco-santos closed 1 year ago

vasco-santos commented 1 year ago

Per https://github.com/web3-storage/w3link/pull/41#issuecomment-1407083017 and offline thread we decided to not allow anymore access to dotstorage APIs given an attacker could rely on the upload API to steal data