mozilla/amo-validator — pull request #141 by cvan (2012-04-22 20:45:11+00:00)
Title: Require 'marketplace.mozilla.org' or '*' for manifest `installs_allowed_from` property

Currently, the manifest validator requires that `installs_allowed_from` contains one of the following:

*
https://marketplace.mozilla.org/
https://marketplace-dev.mozilla.org/
https://apps-preview.mozilla.org/

This means users are able to submit a manifest to production (https://marketplace.mozilla.org/) where `{"installs_allowed_from": "https://marketplace-dev.mozilla.org/"}`.

It appears that we've been approving manifests on https://marketplace-dev.allizom.org/ that are specified as `{"installs_allowed_from": "https://marketplace.mozilla.org/"}`. So when users go to install the app on -dev, where the domain is not whitelisted, the browser barks up a `DENIED` error.

(See https://bugzilla.mozilla.org/show_bug.cgi?id=747252 for discussion.)

I'd like to lift this restriction in the `amo-validator` and instead check in `zamboni` that `settings.SITE_URL` is matched by `installs_allowed_from`.