diff --git a/config/application.rb b/config/application.rb
index 916e96b79..03d7fff90 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -33,7 +33,8 @@ class Application < Rails::Application
     config.active_record.schema_format = :sql
 
     # Guard against DNS rebinding attacks by permitting hosts
-    config.hosts << /timeoverflow\.(local|org)/
-    config.hosts << "staging.timeoverflow.org"
+    config.hosts << 'timeoverflow.local'
+    config.hosts << 'staging.timeoverflow.org'
+    config.hosts << 'www.timeoverflow.org'
   end
 end