Fix hosts regex

See #1483 (comment)
alphagov · Oct 18, 2024 · f62882a · f62882a
1 parent 6fecc15
commit f62882a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -85,7 +85,7 @@
 
   # Enable DNS rebinding protection and other `Host` header attacks.
   config.hosts = [
-    /contacts-admin\..*gov.uk?/,
+    /contacts-admin\..*\.gov.uk$/,
   ]
 
   # Skip DNS rebinding protection for the default health check endpoint.