Rails HostAuthorization setting to Allow any hosts

README: Rails HostAuthorization setting to Allow any hosts.md

Rails HostAuthorization setting to Allow any hosts

• config

Rails.application.config.hosts << /.*/

• env

  • rails 6.0.3.2

• works

  • When set regexp to config.hosts, it evaluate as sanitized regexp (ref: method of sanitize_regexp).

# sanitized regexp
host = /.*/
sanitize_regexp(host)
-> /\A(?-mix:.*)\z/

# check to allow host (via: allows?)
allowed = /\A(?-mix:.*)\z/
allowed === 'example.com'
-> true

allowed === 'xxxx.com'
-> true

• ref: GitHub rails/rails ActionDispatch::HostAuthorization
  • https://github.com/rails/rails/blob/98a57aa5f610bc66af31af409c72173cdeeb3c9e/actionpack/lib/action_dispatch/middleware/host_authorization.rb#L36

PR where the file was added: rails/rails#33145