where do i have to put warnOnPotentiallyInsecureHostPattern: false

[smoebody]

The documentation on npm states, that i have to set warnOnPotentiallyInsecureHostPattern: false to suppress the warning about potentially insecure domain in the 'appropriate application configurations' in package.json.
Could you be more precise, i.e. add an example?

[msujew]

Hi @smoebody thank you for your question.

You can set theia specific application configuration in your package.json like this:

"theia": {
  "frontend": {
    "config": {
      "warnOnPotentiallyInsecureHostPattern": false
    }
  },
  "backend": {
    "config": {
      "warnOnPotentiallyInsecureHostPattern": false
    }
  }
},

This specific setting has to be set for both the frontend as well as the backend config. For a full example how to set the config, see the example browser app or electron app.

[vince-fugnitto]

@smoebody please note that turning off the preference is the unsafe fix, the proper fix is to handle it securely:

• https://github.com/eclipse-theia/theia/tree/master/packages/mini-browser#security-warnings
• https://github.com/eclipse-theia/theia/tree/master/packages/plugin-ext#security-warnings