why disable private network repo?

[ktlcove]

hub/internal/util/http.go

Lines 79 to 81 in 118b925

	if !ip.IsGlobalUnicast() || ip.IsPrivate() {
	return ErrRestrictedConnection
	}

we provide a private deploy but disable private network repo . I want know the reason.

[tegioz]

Hi @ktlcove

If you are running your own Artifact Hub instance, you can control this behavior with the restrictedHTTPClient configuration option of the Helm chart.

The reason to provide such a feature is to try to prevent SSRF attacks.

[ktlcove]

thanks , I changed this helm value, It works.