doc-exports/docs/obs/umn/obs_03_0341.html
Jawei, Li 43ab92496d OBS UMN 2.0.38.SP5
Reviewed-by: gtema <artem.goncharov@gmail.com>
Co-authored-by: Jawei, Li <lijiawei5@huawei.com>
Co-committed-by: Jawei, Li <lijiawei5@huawei.com>
2022-11-07 09:41:09 +00:00

22 lines
5.0 KiB
HTML

<a name="obs_03_0341"></a><a name="obs_03_0341"></a>
<h1 class="topictitle1">Configuring URL Validation</h1>
<div id="body1499753333227"><p id="obs_03_0341__p54693607">OBS blocks access requests from blacklisted URLs and allows those from whitelisted URLs.</p>
<div class="section" id="obs_03_0341__section48948668114148"><h4 class="sectiontitle">Prerequisites</h4><p id="obs_03_0341__p5419211114148">Static website hosting has been enabled.</p>
</div>
<div class="section" id="obs_03_0341__section6430701414453"><h4 class="sectiontitle">Procedure</h4><ol id="obs_03_0341__ol4189221614453"><li id="obs_03_0341__li99821455306"><span>In the bucket list, click the bucket to be operated. The <strong id="obs_03_0341__obs_03_0307_b1395123914108">Overview</strong> page of the bucket is displayed.</span></li><li id="obs_03_0341__li18830181855820"><span>In the right <strong id="obs_03_0341__b383843419398">Basic Configurations</strong> area, click <strong id="obs_03_0341__b710962963910">URL Validation</strong>. The <strong id="obs_03_0341__b12969820203915">URL Validation</strong> page is displayed.</span></li><li id="obs_03_0341__li77884511145"><span>Click <span><img id="obs_03_0341__image11167185317519" src="en-us_image_0148639849.png"></span> next to the text box of <strong id="obs_03_0341__b192115351205">Whitelisted Referers</strong> or <strong id="obs_03_0341__b7922203502010">Blacklisted Referers</strong>, and enter the referers.</span><p><p id="obs_03_0341__p1371658101719">The following describes the principles for setting <strong id="obs_03_0341__b923224378153658">Referers</strong>:</p>
<ul id="obs_03_0341__ul121103404243"><li id="obs_03_0341__li2923104018269">The length of a whitelist or blacklist cannot exceed 1024 characters.</li><li id="obs_03_0341__li6240345182114">Referer format:<ul id="obs_03_0341__ul576834602113"><li id="obs_03_0341__li01111340102413">You can enter multiple referers, each in a line.</li><li id="obs_03_0341__li18468729228">The referer parameter supports asterisks (*) and question marks (?). An asterisk works as a wildcard that can replace zero or multiple characters, and a question mark (?) can replace a single character.</li><li id="obs_03_0341__li9406166205718">If the referer header field contains <strong id="obs_03_0341__b37721240165417">http</strong> or <strong id="obs_03_0341__b1595504213547">https</strong> during download, the referer must contain <strong id="obs_03_0341__b143516558548">http</strong> or <strong id="obs_03_0341__b79222562542">https</strong>.</li></ul>
</li><li id="obs_03_0341__li711134011241">When <strong id="obs_03_0341__b1629331042153240">Whitelisted Referers</strong> is empty but <strong id="obs_03_0341__b875120416153240">Blacklisted Referers</strong> is not, all websites except specified ones in the blacklist are allowed to access data in the target bucket.</li><li id="obs_03_0341__li161121440142416">When <strong id="obs_03_0341__b96568086315334">Whitelisted Referers</strong> is not empty and <strong id="obs_03_0341__b195528922415334">Blacklisted Referers</strong> is empty or not empty, only specified websites in the whitelist are allowed to access data in the target bucket.</li></ul>
<div class="note" id="obs_03_0341__note94987112510"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p class="text" id="obs_03_0341__p1549881182517">When <strong id="obs_03_0341__b802756024152252">Whitelisted Referers</strong> is the same as <strong id="obs_03_0341__b529940501152252">Blacklisted Referers</strong>, the blacklist takes effect. For example, if the fields of both <strong id="obs_03_0341__b156570048152250">Whitelisted Referers</strong> and <strong id="obs_03_0341__b795734510152250">Blacklisted Referers</strong> are set to <strong id="obs_03_0341__b1031023623152250">https://www.example.com</strong>, access requests from this address are blocked.</p>
</div></div>
<ul id="obs_03_0341__ul1315578192618"><li id="obs_03_0341__li115518142614">When <strong id="obs_03_0341__b129313577915342">Whitelisted Referers</strong> and <strong id="obs_03_0341__b17202675315342">Blacklisted Referers</strong> are empty, all websites are allowed to access data in the target bucket by default.</li><li id="obs_03_0341__li615788102612">Before determining whether a user has the four types of permissions (<strong id="obs_03_0341__b1703939890152130">Read</strong>, <strong id="obs_03_0341__b1195076588152130">Write</strong>, <strong id="obs_03_0341__b748659032152130">ACL View</strong>, and <strong id="obs_03_0341__b280389850152130">ACL Edit</strong>) for a bucket or objects in the bucket, check whether the user complies with the URL validation principles of the <strong id="obs_03_0341__b203886873152130">Referers</strong> field.</li></ul>
</p></li><li id="obs_03_0341__li15291204011273"><span>Click <span><img id="obs_03_0341__image339729105016" src="en-us_image_0148639851.png"></span> to save the settings.</span></li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0340.html">URL Validation</a></div>
</div>
</div>