ActivityPlug API / @activityplug/server / createOpenOriginPolicy

Function: createOpenOriginPolicy()

createOpenOriginPolicy(options?): OriginPolicy

Defined in: packages/server/src/security/origin-policy.ts:25

Builds a policy that admits any HTTPS origin.

Use this when the deployment must reach ActivityPub servers that cannot be enumerated in advance. The policy still rejects non-HTTP schemes, origins carrying credentials or a path, and, outside development, plaintext HTTP. Address-level protections stay in the vetted transport: private, loopback, and link-local addresses remain blocked unless allowPrivateNetworks is enabled, and each redirect hop is evaluated again.

Parameters

options?

OpenOriginPolicyOptions = {}

Returns

OriginPolicy