Compare commits
No commits in common. "feature/host-validation" and "dev" have entirely different histories.
feature/ho
...
dev
@ -1,18 +0,0 @@
|
|||||||
import { NextResponse } from "next/server";
|
|
||||||
|
|
||||||
export function middleware(req) {
|
|
||||||
// Check the Host header, if HOMEPAGE_ALLOWED_HOSTS is set
|
|
||||||
const host = req.headers.get("host");
|
|
||||||
const allowedHosts = process.env.HOMEPAGE_ALLOWED_HOSTS
|
|
||||||
? process.env.HOMEPAGE_ALLOWED_HOSTS.split(",").concat(["localhost:3000"])
|
|
||||||
: [];
|
|
||||||
console.log("Host: ", host, "Allowed Hosts: ", allowedHosts);
|
|
||||||
if (allowedHosts.length && !(host || allowedHosts.includes(host))) {
|
|
||||||
return new NextResponse("Invalid Host header", { status: 400 });
|
|
||||||
}
|
|
||||||
return NextResponse.next();
|
|
||||||
}
|
|
||||||
|
|
||||||
export const config = {
|
|
||||||
matcher: "/api/:path*",
|
|
||||||
};
|
|
||||||
Loading…
Reference in New Issue
Block a user