Should copy from localhost over insecure protocols be allowed?

[ClSlaid]

Summary
Currently, Databend disallows copying from insecure data sources. When judging whether a connection is secure, Databend simply checks if it's using secure protocols like HTTPS.

The Secure Contexts of web browsers trusts locally delivered user contents:

Locally-delivered resources such as those with http://127.0.0.1 URLs, http://localhost and http://*.localhost URLs (e.g. http://dev.whatever.localhost/), and file:// URLs are also considered to have been delivered securely.

Advantages

Allowing users to copy from localhost should make copying files more effortless, and debugging easier since developers can simply establish those (mocked) services locally.

Disadvantages

Databend Cloud maybe should not allow this feature since it may make users access "local" files, so there should be a flag to enable or disallow insecure connection between localhost.

[Xuanwo]

Currently, Databend disallows copying from insecure data sources

Start databend-query with allow_insecure.

[youngsofun]

it is useful when I need to copy a big file (like 60GB) locally for test.