Skip to content

Allow wildcard * to be used in trusted domains #314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
LukasReschke merged 5 commits into from
Jul 7, 2016
Merged

Allow wildcard * to be used in trusted domains #314

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
5fb797a
Allow wildcard * to be used in trusted domains, to support setups whe…
jernst Jul 5, 2016
c549b27
Duh, no 'next' in PHP.
jernst Jul 6, 2016
20ebc2a
Trusted domain wildcard checking made shorter, supporting multiple *
jernst Jul 6, 2016
d6e5c4c
Disallow certain malformed domain names even if they match the truste…
jernst Jul 6, 2016
2b96e90
Extended documentation on trusted_domains to cover ports and wildcards.
jernst Jul 7, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Extended documentation on trusted_domains to cover ports and wildcards.
  • Loading branch information
@jernst
jernst committed Jul 7, 2016
commit 2b96e904d092f6e44be7df1380fbaf64821b2b50
6 changes: 6 additions & 0 deletions config/config.sample.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,12 @@
* Your list of trusted domains that users can log into. Specifying trusted
* domains prevents host header poisoning. Do not remove this, as it performs
* necessary security checks.
* You can specify:
* - the exact hostname of your host or virtual host, e.g. demo.example.org.
* - the exact hostname with permitted port, e.g. demo.example.org:443.
* This disallows all other ports on this host
* - use * as a wildcard, e.g. ubos-raspberry-pi*.local will allow
* ubos-raspberry-pi.local and ubos-raspberry-pi-2.local
*/
'trusted_domains' =>
array (
Expand Down