mirror of
https://github.com/discourse/discourse.git
synced 2026-08-08 17:53:55 +08:00
0cf23c2854Currently the hosts that can be used for a livestream event are hardcoded in the composer's JavaScript, and the server accepts any https location, so the list isn't really enforced... and there's no way to use hosts that would otherwise work, including custom or self-hosted sources. This adds a `livestream_allowed_hosts` site setting (defaulting to the existing hardcoded list) and validates against it both in the composer and on the server. Whether a livestream embeds a player still depends on the site's onebox settings. --------- Co-authored-by: Martin Brennan <martin@discourse.org> |
||
|---|---|---|
| .. | ||
| fabricators | ||
| fixtures/csv | ||
| integration | ||
| jobs | ||
| lib | ||
| migrations | ||
| models | ||
| requests | ||
| serializers | ||
| services | ||
| system | ||
