Extended engine option for access restriction to a whitelist instead of a single flag

Libraries/iTasks/Engine.dcl

@@ -63,7 +63,7 @@ instance Startable (a,b) | Startable a & Startable b
 	, appVersion    :: String
 	, serverPort    :: Int
 	, serverUrl     :: String
-	, localhostOnly :: Bool     // Only allow connections from localhost. (default to true)
+	, allowedHosts  :: [String] // Only allow connections from these hosts (default ["127.0.0.1"])
 	, keepaliveTime :: Timespec
 	, sessionTime   :: Timespec
 	, persistTasks  :: Bool

Libraries/iTasks/Engine.icl

@@ -203,7 +203,7 @@ defaultEngineOptions world
 		, appVersion     = appVersion
 		, serverPort     = IF_POSIX_OR_WINDOWS 8080 80
 		, serverUrl      = "http://localhost/"
-		, localhostOnly  = True
+		, allowedHosts   = ["127.0.0.1"]
 		, keepaliveTime  = {tv_sec=300,tv_nsec=0} // 5 minutes
 		, sessionTime    = {tv_sec=60,tv_nsec=0}  // 1 minute, (the client pings every 10 seconds by default)
 		, persistTasks   = False

Libraries/iTasks/Internal/Client/RunOnClient.icl

@@ -126,7 +126,7 @@ createClientIWorld serverURL currentInstance
  	                    , appVersion = locundef "appVersion"
  	                    , serverPort = 80
                         , serverUrl = locundef "serverUrl"
-						, localhostOnly = False
+						, allowedHosts = []
 	                    , keepaliveTime = locundef "keepaliveTime"
                         , sessionTime = locundef "sessionTime"
                         , persistTasks = False

Libraries/iTasks/Internal/WebService.icl

@@ -129,16 +129,16 @@ where
 wsockTextMsg :: String -> [String]
 wsockTextMsg payload = [wsockMsgFrame WS_OP_TEXT True payload]
 
-import StdDebug
 httpServer :: !Int !Timespec ![WebService r w] (sds () r w) -> ConnectionTask | TC r & TC w & RWShared sds
 httpServer port keepAliveTime requestProcessHandlers sds
     = wrapIWorldConnectionTask {ConnectionHandlersIWorld|onConnect=onConnect, onData=onData, onShareChange=onShareChange, onTick=onTick, onDisconnect=onDisconnect, onDestroy=onDestroy} sds
 where
-    onConnect connId host r iworld=:{IWorld|world,clock,options}
-		| options.localhostOnly && host <> "127.0.0.1"
-			= (Ok (NTIdle host clock),Nothing,[],True,{IWorld|iworld & world = world})
-		| otherwise
+    onConnect connId host r iworld=:{IWorld|world,clock,options={allowedHosts}}
+		| allowedHosts =: [] || isMember host allowedHosts
 			= (Ok (NTIdle host clock),Nothing,[],False,{IWorld|iworld & world = world})
+		| otherwise
+			//Close the connection immediately if the remote host is not in the whitelist
+			= (Ok (NTIdle host clock),Nothing,[],True,{IWorld|iworld & world = world})
 
     onData data connState=:(NTProcessingRequest request localState) r env
         //Select handler based on request path