use secure config defaults for OCM

Signed-off-by: Jörn Friedrich Dreyer <[email protected]>
owncloud · Oct 15, 2024 · 59589cd · 59589cd
1 parent 49ea786
commit 59589cd
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/changelog/unreleased/secure-ocm-by-default.md b/changelog/unreleased/secure-ocm-by-default.md
@@ -0,0 +1,4 @@
+Bugfix: use secure config defaults for OCM
+
+https://github.com/owncloud/ocis/pull/10307
+
diff --git a/services/ocm/pkg/config/defaults/defaultconfig.go b/services/ocm/pkg/config/defaults/defaultconfig.go
@@ -109,7 +109,8 @@ func DefaultConfig() *config.Config {
 		OCMProviderAuthorizerDriver: "json",
 		OCMProviderAuthorizerDrivers: config.OCMProviderAuthorizerDrivers{
 			JSON: config.OCMProviderAuthorizerJSONDriver{
-				Providers: filepath.Join(defaults.BaseConfigPath(), "ocmproviders.json"),
+				Providers:             filepath.Join(defaults.BaseConfigPath(), "ocmproviders.json"),
+				VerifyRequestHostname: true,
 			},
 		},
 		OCMShareProvider: config.OCMShareProvider{
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,4 @@
		Bugfix: use secure config defaults for OCM

		https://github.com/owncloud/ocis/pull/10307