Compare commits

..

No commits in common. "feature/host-validation" and "dev" have entirely different histories.

View File

@ -1,18 +0,0 @@
import { NextResponse } from "next/server";
export function middleware(req) {
// Check the Host header, if HOMEPAGE_ALLOWED_HOSTS is set
const host = req.headers.get("host");
const allowedHosts = process.env.HOMEPAGE_ALLOWED_HOSTS
? process.env.HOMEPAGE_ALLOWED_HOSTS.split(",").concat(["localhost:3000"])
: [];
console.log("Host: ", host, "Allowed Hosts: ", allowedHosts);
if (allowedHosts.length && !(host || allowedHosts.includes(host))) {
return new NextResponse("Invalid Host header", { status: 400 });
}
return NextResponse.next();
}
export const config = {
matcher: "/api/:path*",
};