commit 542a4a009f6ffe898a67bdd63098c44d3735f784
author Adrià Vilanova Martínez <me@avm99963.com> Mon Sep 06 18:11:05 2021 +0200
committer Adrià Vilanova Martínez <me@avm99963.com> Mon Sep 06 18:11:05 2021 +0200
tree afb9a5522044d24ca0f7ab362955b0dff14974e2
parent e94112fbdb77c0456a575e3e7ef5314c33fb8d3a

Allowlist extension origins in envoy proxy

Change-Id: Ia9fc9b43d5f1a683e9ba3c8bab837b2e11f81ba8

docker/envoy/envoy.yaml

diff --git a/docker/envoy/envoy.yaml b/docker/envoy/envoy.yaml
index 16df6f3..e1aff4a 100644
--- a/docker/envoy/envoy.yaml
+++ b/docker/envoy/envoy.yaml
@@ -28,6 +28,9 @@
                 allow_origin_string_match:
                 - prefix: "https://twpt-dashboard.avm99963.com"
                 - prefix: "https://twpt-dashboard-frontend.web.app"
+                - prefix: "chrome-extension://hpgakoecmgibigdbnljgecablpipbajb"
+                - prefix: "chrome-extension://memmklnkkhifmflmidnflfcdepamljef"
+                - prefix: "moz-extension://" # Mozilla extensions use random UUIDs.
                 allow_methods: GET, PUT, DELETE, POST, OPTIONS
                 allow_headers: keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,custom-header-1,x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,x-grpc-web,grpc-timeout,authorization
                 max_age: "1728000"