Merge pull request #579 from coopdevs/allow-production-host

Allow requests from production host
2021-01-05 11:17:24 +01:00
parent 294c13b7e9 9c795dfcab
commit 6210d222fd
1 changed files with 3 additions and 2 deletions
@@ -33,7 +33,8 @@ module Timeoverflow
    config.active_record.schema_format = :sql

    # Guard against DNS rebinding attacks by permitting hosts
-    config.hosts << /timeoverflow\.(local|org)/
-    config.hosts << "staging.timeoverflow.org"
+    config.hosts << 'timeoverflow.local'
+    config.hosts << 'staging.timeoverflow.org'
+    config.hosts << 'www.timeoverflow.org'
  end
 end