Basic browser gateway target support

browsergateway/ssh.go

@@ -8,6 +8,7 @@ import (
 	"log"
 	"net"
 	"net/http"
+	"strconv"
 	"time"
 
 	"github.com/coder/websocket"
@@ -56,6 +57,11 @@ func (g *Gateway) HandleSSH(w http.ResponseWriter, r *http.Request) {
 		if port == "" {
 			port = "22"
 		}
+		sshPort, _ := strconv.Atoi(port)
+		if !g.isAllowed("ssh", host, sshPort) {
+			http.Error(w, "destination not allowed", http.StatusForbidden)
+			return
+		}
 		target = net.JoinHostPort(host, port)
 	}