# GraphQL & incoming webhooks: Input file allowed HTTP URLs

**URL:** <https://discuss.workflowgen.com/t/graphql-incoming-webhooks-input-file-allowed-http-urls/1756>\
**Category:** Development\
**Created:** [December 27, 2020, 3:18pm UTC](https://discuss.workflowgen.com/t/graphql-incoming-webhooks-input-file-allowed-http-urls/1756 "2020-12-27T15:18:38Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![wfg-admin](https://yyz2.discourse-cdn.com/flex030/user_avatar/discuss.workflowgen.com/wfg-admin/32/714_2.png) [@wfg-admin](https://discuss.workflowgen.com/u/wfg-admin)\
**Post date:** [December 27, 2020, 3:18pm UTC](https://discuss.workflowgen.com/t/graphql-incoming-webhooks-input-file-allowed-http-urls/1756/1 "2020-12-27T15:18:38Z")

</div>

You can configure allowed HTTP URLs for input files using the **Input file allowed HTTP URLs** setting in the **GraphQL** and/or **Webhooks** section on the Control Panel **Integration** tab.

> **Note:** This setting is available as of WorkflowGen version 7.15.0.

To disallow file uploads using HTTP and/or HTTPS URLs, leave the field empty.

To allow certain URLs only, enter comma-separated values according to the table below:

| Value | Description |
| --- | --- |
| Empty | No HTTP or HTTPS URLs allowed |
| `*` | All HTTP and HTTPS URLs allowed |
| `https://*` | HTTPS URLs only |
| `http://*` | HTTP URLs only |
| `http://mydomain/*` | HTTP from a specific domain only |
| `http://mydomain/folder/*` | HTTP from a specific folder only |
| `http://mydomain/folder*` | All files and folders whose names start with `folder` , e.g.: 
- `http://mydomain/folderfile.jpg`
- `http://mydomain/folder/file.jpg`
- `http://mydomain/folder2/file.jpg`

 |
| `http://mydomain/folder/file.jpg` | Specific file only |