The example array of trusted host patterns seems to accept "example.org.evil.test" as trusted. Shouldn't there be dollar signs on the .org lines?

 * $settings['trusted_host_patterns'] = array(
 *   '^example\.com$',
 *   '^.+\.example\.com$',
 *   '^example\.org',
 *   '^.+\.example\.org',
 * );

Compact beta eval: This is API docs, unfrozen.

CommentFileSizeAuthor
drupal-trusted-host-example.patch509 bytesjacob.embree
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jacob.embree’s picture

Issue summary: View changes
jhodgdon’s picture

Issue summary: View changes
Status: Needs review » Reviewed & tested by the community

Yeah, good idea indeed!

alexpott’s picture

Status: Reviewed & tested by the community » Fixed

Committed 273e7fc and pushed to 8.0.x. Thanks!

Thanks for adding the beta evaluation to the issue summary.

  • alexpott committed 273e7fc on 8.0.x
    Issue #2425739 by jacob.embree: Incorrect regex in trusted_host_patterns...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.