Merge pull request #1183 from alphagov/ChrisBAshton-patch-2

ChrisBAshton · web-flow · commit bb94ebf4284c · 2024-10-18T13:17:23.000+01:00
Fix hosts regex
diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -82,7 +82,7 @@
 
   # Enable DNS rebinding protection and other `Host` header attacks.
   config.hosts = [
-    /short-url-manager\..*gov.uk?/,
+    /short-url-manager\..*\.gov.uk$/,
   ]
 
   # Skip DNS rebinding protection for the default health check endpoint.

Original file line number	Diff line number	Diff line change
`@@ -82,7 +82,7 @@`
`82`	`82`
`83`	`83`	# Enable DNS rebinding protection and other `Host` header attacks.
`84`	`84`	`config.hosts = [`
`85`		`- /short-url-manager\..*gov.uk?/,`
	`85`	`+ /short-url-manager\..*\.gov.uk$/,`
`86`	`86`	`]`
`87`	`87`
`88`	`88`	`# Skip DNS rebinding protection for the default health check endpoint.`