Merge pull request #579 from coopdevs/allow-production-host

Allow requests from production host
coopdevs · Jan 5, 2021 · 6210d22 · 6210d22
2 parents 294c13b + 9c795df
commit 6210d22
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/config/application.rb b/config/application.rb
@@ -33,7 +33,8 @@ class Application < Rails::Application
     config.active_record.schema_format = :sql
 
     # Guard against DNS rebinding attacks by permitting hosts
-    config.hosts << /timeoverflow\.(local|org)/
-    config.hosts << "staging.timeoverflow.org"
+    config.hosts << 'timeoverflow.local'
+    config.hosts << 'staging.timeoverflow.org'
+    config.hosts << 'www.timeoverflow.org'
   end
 end