updated default allowlist (#205)

castle · Sep 28, 2020 · fae649c · fae649c
1 parent 3d2eb9b
commit fae649c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,7 @@
 
 ## master
 
+- [#205](https://github.com/castle/castle-ruby/pull/205) extended DEFAULT_ALLOWLIST
 - [#204](https://github.com/castle/castle-ruby/pull/204) drop configuration `host`, `port`, `url_prefix` options in favor of `url`
 - [#203](https://github.com/castle/castle-ruby/pull/203) switch to denylist and allowlist
 

diff --git a/lib/castle/configuration.rb b/lib/castle/configuration.rb
@@ -35,13 +35,20 @@ class Configuration
       Connection
       Content-Length
       Content-Type
+      Dnt
       Host
       Origin
       Pragma
       Referer
-      TE
+      Sec-Fetch-Dest
+      Sec-Fetch-Mode
+      Sec-Fetch-Site
+      Sec-Fetch-User
+      Te
       Upgrade-Insecure-Requests
+      User-Agent
       X-Castle-Client-Id
+      X-Requested-With
     ].freeze
 
     attr_accessor :request_timeout, :url, :trust_proxy_chain