Add option for whitelisting more origins

trezor / trezord-go

:smiling_imp: Trezor Communication Daemon (written in Go)

GNU Lesser General Public License v3.0

245 stars 146 forks source link

Add option for whitelisting more origins #155

Closed karelbilek closed 4 years ago

karelbilek commented 5 years ago

An idea - add an option for whitelisting more origins.

Maybe that option might get abused in some way by some attacker, but really, if the attacker can change options of binaries, he already can do worse than allow third party websites to connect to Trezor.

prusnak commented 4 years ago

We can disable CORS completely via a debug build option https://github.com/trezor/trezord-go/pull/195