How does it work?

The proxy service will deny access to any domain that is in the blacklist. If the domain name does not match any of the blacklist, the proxy filter will verify if the domain name is on the white list. If the domain name is not defined in either the white list or black list, access will be denied. Multiple values can be added for each list and wildcards can also be used.

The following is an example of a valid configuration:




<component>

  <key>org.exoplatform.web.security.proxy.ProxyFilterService</key>

  <type>org.exoplatform.web.security.proxy.ProxyFilterService</type>

  <init-params>

    <values-param>

      <name>white-list</name>

      <value>*.example.com</value>

      <value>www.example.net</value>

    </values-param>

    <values-param>

      <name>black-list</name>

      <value>evil.example.com</value>

    </values-param>

  </init-params>

</component>