Merge pull request #1284 from alphagov/add-hosts

Configure hosts for application
alphagov · Oct 10, 2024 · 35864ef · 35864ef
2 parents 8e712d3 + 36c94bc
commit 35864ef
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/config/environments/production.rb b/config/environments/production.rb
@@ -90,4 +90,12 @@
     logger.formatter = config.log_formatter
     config.logger    = ActiveSupport::TaggedLogging.new(logger)
   end
+
+  # Enable DNS rebinding protection and other `Host` header attacks.
+  config.hosts = [
+    /maslow\..*gov.uk?/,
+  ]
+
+  # Skip DNS rebinding protection for the default health check endpoint.
+  config.host_authorization = { exclude: ->(request) { request.path.match?("^\/healthcheck") } }
 end