monsur / enable-cors.org

Advocacy for CORS
http://enable-cors.org/
208 stars 98 forks source link

Add End of String $ for nginx domain regex #86

Closed ericr3r closed 9 years ago

ericr3r commented 9 years ago

The Regex for the domain check does not include an end of string terminator ($) so it would allow a match on additional hosts like "mckinsey.com.untrusteddomain.com"

monsur commented 9 years ago

Thank you!