Allow proxying to registered lapp:Application endpoints regardless of…#284
Merged
namedgraph merged 6 commits intodevelopfrom Apr 6, 2026
Merged
Conversation
… ENABLE_LINKED_DATA_PROXY When ENABLE_LINKED_DATA_PROXY=false, requests to registered lapp:Application base URIs (e.g. demo.linkeddatahub.com from linkeddatahub.com) were incorrectly blocked. These are first-party endpoints, not third-party proxy targets. ProxyRequestFilter now calls matchApp(targetURI) before the proxy-enabled check; if the target's origin matches a registered application, the check is skipped. SSRF validation is preserved for all requests. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Replaces the verbose switch on HTTP method with a single Invocation.Builder call, proxying all methods rather than whitelisting GET/POST/PUT/PATCH/DELETE. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
… ENABLE_LINKED_DATA_PROXY
When ENABLE_LINKED_DATA_PROXY=false, requests to registered lapp:Application base URIs (e.g. demo.linkeddatahub.com from linkeddatahub.com) were incorrectly blocked. These are first-party endpoints, not third-party proxy targets.
ProxyRequestFilter now calls matchApp(targetURI) before the proxy-enabled check; if the target's origin matches a registered application, the check is skipped. SSRF validation is preserved for all requests.