fix: validate managed reverse proxy domain

PostHog · Dec 4, 2024 · 05a8f0a · 05a8f0a
1 parent 8b483e2
commit 05a8f0a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/frontend/src/scenes/settings/environment/proxyLogic.ts b/frontend/src/scenes/settings/environment/proxyLogic.ts
@@ -83,6 +83,8 @@ export const proxyLogic = kea<proxyLogicType>([
                     ? 'Domains cannot include wildcards'
                     : !isDomain('http://' + domain)
                     ? 'Do not include the protocol e.g. https://'
+                    : !domain.match(/^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$/)
+                    ? "Invalid domain. Please provide a lowercase RFC 1123 subdomain. It must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character"
                     : undefined,
             }),
             submit: ({ domain }) => {