navapbc / template-application-rails

Ruby on Rails with USWDS template, including CI/CD, for teams building web applications
Apache License 2.0
2 stars 1 forks source link

Configure Rails hosts in production #39

Open SammySteiner opened 4 months ago

SammySteiner commented 4 months ago

What's the task?

Configure ActionDispatch::HostAuthorization in production.rb to prevent DNS rebinding attacks using the APP_HOST env variable to match part of the URL.