Compare commits
5
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
5f6059896b | ||
|
|
b906b64fcd | ||
|
|
cdcf9bc4a4 | ||
|
|
e2bf0e4975 | ||
|
|
9179bc07c7 |
@@ -1,18 +0,0 @@
|
|||||||
import { NextResponse } from "next/server";
|
|
||||||
|
|
||||||
export function middleware(req) {
|
|
||||||
// Check the Host header, if HOMEPAGE_ALLOWED_HOSTS is set
|
|
||||||
const host = req.headers.get("host");
|
|
||||||
const allowedHosts = process.env.HOMEPAGE_ALLOWED_HOSTS
|
|
||||||
? process.env.HOMEPAGE_ALLOWED_HOSTS.split(",").concat(["localhost:3000"])
|
|
||||||
: [];
|
|
||||||
console.log("Host: ", host, "Allowed Hosts: ", allowedHosts);
|
|
||||||
if (allowedHosts.length && !(host || allowedHosts.includes(host))) {
|
|
||||||
return new NextResponse("Invalid Host header", { status: 400 });
|
|
||||||
}
|
|
||||||
return NextResponse.next();
|
|
||||||
}
|
|
||||||
|
|
||||||
export const config = {
|
|
||||||
matcher: "/api/:path*",
|
|
||||||
};
|
|
||||||
Reference in new issue
Block a user