Currently, we use hard-coded lists for the allowed domains when HTTP is enabled. It would be good to move this to a GUC. GUC's don't support multiple values out of the box, but there are a few approaches commonly used to emulate this (I have no opinion on which one is used).
See also #374, which is related to moving the HTTP security code to be GUC-based rather than driven by cargo features.
Currently, we use hard-coded lists for the allowed domains when HTTP is enabled. It would be good to move this to a GUC. GUC's don't support multiple values out of the box, but there are a few approaches commonly used to emulate this (I have no opinion on which one is used).
See also #374, which is related to moving the HTTP security code to be GUC-based rather than driven by cargo features.