From 9c795dfcab3d6e82bf84b33f56737684249aa18a Mon Sep 17 00:00:00 2001 From: Pau Perez Date: Tue, 5 Jan 2021 11:15:46 +0100 Subject: [PATCH] Allow requests from production host We missed the mess we have at DNS level with the www domain. We need this to make it work in production. IMO it's much more explicit add a host per line instead of the regex. --- config/application.rb | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/config/application.rb b/config/application.rb index 916e96b79..03d7fff90 100644 --- a/config/application.rb +++ b/config/application.rb @@ -33,7 +33,8 @@ class Application < Rails::Application config.active_record.schema_format = :sql # Guard against DNS rebinding attacks by permitting hosts - config.hosts << /timeoverflow\.(local|org)/ - config.hosts << "staging.timeoverflow.org" + config.hosts << 'timeoverflow.local' + config.hosts << 'staging.timeoverflow.org' + config.hosts << 'www.timeoverflow.org' end end