block urls pointing to internal addresses (#1012)

2024-10-20 18:33:05 -07:00
parent b31b77707c
commit 3e40267cfa
4 changed files with 41 additions and 2 deletions
--- a/skyvern/config.py
+++ b/skyvern/config.py
@@ -34,6 +34,7 @@ class Settings(BaseSettings):
    LOG_LEVEL: str = "INFO"
    PORT: int = 8000
    ALLOWED_ORIGINS: list[str] = ["*"]
+    BLOCKED_HOSTS: list[str] = ["localhost"]

    # Secret key for JWT. Please generate your own secret key in production
    SECRET_KEY: str = "PLACEHOLDER"