From 670afe8007dba3189a2e9750ff2aadef06d821dd Mon Sep 17 00:00:00 2001 From: Rebecca Pearce <17481621+beccapearce@users.noreply.github.com> Date: Tue, 22 Oct 2024 12:45:46 +0100 Subject: [PATCH] Revert "Configure hosts for application" --- config/environments/production.rb | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/config/environments/production.rb b/config/environments/production.rb index 4b76fdb58..102c084c6 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -80,10 +80,10 @@ config.active_record.dump_schema_after_migration = false # Enable DNS rebinding protection and other `Host` header attacks. - config.hosts = [ - /local-links-manager\..*\.gov.uk$/, - ] - + # config.hosts = [ + # "example.com", # Allow requests from example.com + # /.*\.example\.com/ # Allow requests from subdomains like `www.example.com` + # ] # Skip DNS rebinding protection for the default health check endpoint. - config.host_authorization = { exclude: ->(request) { request.path.match?("^\/healthcheck") } } + # config.host_authorization = { exclude: ->(request) { request.path == "/up" } } end