whitelist/regex for remote resource URL requests

considering these properties to check:

in project.properties: "project.resources.allowedURL.0-X"

in framework.properties: "framework.resources.allowedURL.0-X"

I forgot about project.properties. That's probably the best place to put the project level restrictions.

so forget about framework props?

Yeah, start in project.properties. Another ticket should be created for global override, which I kinda see framework.properties providing.

don't really need a separate ticket...if you want framework.props global
override it's easier as part of this ticket

Framework.properties can be the override. Add a log message when project.properties rules are completely overridden by a more restrictive framework.properties rule.

if project.resources.url == input url, then it is explicitly allowed.

otherwise this logic is used:

F=framework.props
P=project.props
unset= no regexes set
pass=1 or more regexes match
fail=0 regexes match

  P\F| unset | pass | fail
unset| no    | yes  | no
pass | yes   | yes  | no
fail | no    | no   | no

yes= allow URL
no= disallow URL

(from [b1c05e70e4d33285c7f4244606004daa20451bc1]) Add whitelist/regex for project/framework.properties provider URLs [#260 whitelist/regex for remote resource URL requests state:resolved] https://github.com/dtolabs/rundeck/commit/b1c05e70e4d33285c7f424460...