Skip to content

Commit

Permalink
Merge pull request #1805 from alphagov/add-hosts
Browse files Browse the repository at this point in the history
Configure hosts for application
  • Loading branch information
mtaylorgds authored Oct 24, 2024
2 parents 8642e69 + dc8665a commit 2d72018
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions config/environments/production.rb
Original file line number Diff line number Diff line change
Expand Up @@ -83,4 +83,12 @@

# Do not dump schema after migrations.
config.active_record.dump_schema_after_migration = false

# Enable DNS rebinding protection and other `Host` header attacks.
config.hosts = [
/content-tagger\..*\.gov.uk/,
]

# Skip DNS rebinding protection for the default health check endpoint.
config.host_authorization = { exclude: ->(request) { request.path.match?("^\/healthcheck") } }
end

0 comments on commit 2d72018

Please sign in to comment.