#737
api: restrict expose API endpoint to tcp/udp protocols by default
Restrict the gateway /expose endpoint to only allow tcp and udp protocols by default. Any other protocol is rejected with HTTP 403. This prevents containers from creating or manipulating host filesystem sockets via the API.
A new --gateway-expose-all-protocols flag disables the restriction for users who need unix/npipe forwarding from the gateway.
[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: redbeam Once this PR has been reviewed and has the lgtm label, please assign baude for approval. For more information see the Code Review Process.
The full list of commands accepted by this bot can be found here.
Approvers can indicate their approval by writing
/approvein a comment Approvers can cancel approval by writing/approve cancelin a comment