OutboundHostValidatorOptions Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Options controlling the shared IOutboundHostValidator "allowed hosts" anti-SSRF control.
public class OutboundHostValidatorOptionstype OutboundHostValidatorOptions = classPublic Class OutboundHostValidatorOptions- Inheritance
-
OutboundHostValidatorOptions
Remarks
Enforcement is opt-in: Enabled defaults to false so existing behavior is preserved until an operator explicitly turns it on.
Constructors
| Name | Description |
|---|---|
| OutboundHostValidatorOptions() | |
Properties
| Name | Description |
|---|---|
| Enabled |
Gets or sets a value indicating whether outbound host validation is enforced. Defaults to |
| Hosts |
Gets or sets the additional allowed host suffixes. An entry matches a request host when the host equals the
entry or is a subdomain of it (e.g. |
| IncludeDefaultMicrosoftHosts |
Gets or sets a value indicating whether the built-in list of Microsoft first-party hosts
(Bot Connector, Graph, SharePoint, Azure Blob/AMS) is included when enforcement is enabled.
Defaults to |