use secure config defaults for OCM

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-10-15 16:49:57 +02:00
parent 49ea786222
commit 59589cd7d3
2 changed files with 6 additions and 1 deletions
@@ -109,7 +109,8 @@ func DefaultConfig() *config.Config {
 		OCMProviderAuthorizerDriver: "json",
 		OCMProviderAuthorizerDrivers: config.OCMProviderAuthorizerDrivers{
 			JSON: config.OCMProviderAuthorizerJSONDriver{
-				Providers: filepath.Join(defaults.BaseConfigPath(), "ocmproviders.json"),
+				Providers:             filepath.Join(defaults.BaseConfigPath(), "ocmproviders.json"),
+				VerifyRequestHostname: true,
 			},
 		},
 		OCMShareProvider: config.OCMShareProvider{