kroki icon indicating copy to clipboard operation
kroki copied to clipboard

Request to whitelist Vega domains

Open domoritz opened this issue 6 years ago • 2 comments

Vega specs can reference data by URL. Currently, Kroki does not allow requests (which makes sense for a public service). It would be nice to at least whitelist some domains like http://vega.github.io/.

domoritz avatar Mar 02 '20 18:03 domoritz

Seems reasonable. But I should use https://vega.github.io/ (https) right?

ggrossetie avatar Mar 05 '20 21:03 ggrossetie

Yeah, we use https wherever possible.

domoritz avatar Mar 06 '20 01:03 domoritz