fix(security): allow PICOCLAW_SERVICE_NAME in default allowlist

This commit is contained in:
Keith Patrick 2026-03-08 23:12:23 +00:00
parent 2395428e21
commit 0e724df6b7

View file

@ -34,6 +34,7 @@ var DefaultEnvAllowlist = map[string]bool{
"HTTP_PROXY": true,
"HTTPS_PROXY": true,
"NO_PROXY": true,
"PICOCLAW_SERVICE_NAME": true,
}
// defaultEnvAllowPrefixes are env var prefixes that are always allowed.