Compare commits
No commits in common. "feature/host-validation" and "dev" have entirely different histories.
feature/ho
...
dev
@ -1,18 +0,0 @@
|
||||
import { NextResponse } from "next/server";
|
||||
|
||||
export function middleware(req) {
|
||||
// Check the Host header, if HOMEPAGE_ALLOWED_HOSTS is set
|
||||
const host = req.headers.get("host");
|
||||
const allowedHosts = process.env.HOMEPAGE_ALLOWED_HOSTS
|
||||
? process.env.HOMEPAGE_ALLOWED_HOSTS.split(",").concat(["localhost:3000"])
|
||||
: [];
|
||||
console.log("Host: ", host, "Allowed Hosts: ", allowedHosts);
|
||||
if (allowedHosts.length && !(host || allowedHosts.includes(host))) {
|
||||
return new NextResponse("Invalid Host header", { status: 400 });
|
||||
}
|
||||
return NextResponse.next();
|
||||
}
|
||||
|
||||
export const config = {
|
||||
matcher: "/api/:path*",
|
||||
};
|
||||
Loading…
Reference in New Issue
Block a user