reject fake host headers

DemocracyClub · Sep 17, 2024 · 1c931ff · 1c931ff
1 parent 4d9d170
commit 1c931ff
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ec_api/settings/base_lambda.py b/ec_api/settings/base_lambda.py
@@ -1,7 +1,7 @@
 from .base import *  # noqa
 import os
 
-ALLOWED_HOSTS = ["*"]
+ALLOWED_HOSTS = [os.environ.get("APP_DOMAIN")]
 DEBUG = os.environ.get("DEBUG", False)
 
 WHITENOISE_AUTOREFRESH = False