Configure allowed hosts (#240)

marcospereira · web-flow · commit ed4304ab7677 · 2019-01-10T15:20:18.000-05:00
diff --git a/conf/application.conf b/conf/application.conf
@@ -22,6 +22,9 @@ play {
     headers {
       contentSecurityPolicy="default-src 'self'; img-src 'self' avatars.githubusercontent.com www.google-analytics.com d379ifj7s9wntv.cloudfront.net; font-src 'self' data: fonts.gstatic.com; script-src 'self' www.google-analytics.com cdn.jsdelivr.net munchkin.marketo.net *.mktoresp.com; style-src 'self' fonts.googleapis.com cdn.jsdelivr.net 'sha256-HNYzPTRt75YR/Yjz4EVJvRKMVMBbL6CMpl655m4gDcw='; connect-src 'self' *.mktoresp.com"
     }
+    hosts {
+      allowed = [".playframework.com", "localhost:9000", "playframework-com-app"] # playframework-com-app is the upstream host configured in nginx
+    }
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,9 @@ play {`
`22`	`22`	`headers {`
`23`	`23`	`contentSecurityPolicy="default-src 'self'; img-src 'self' avatars.githubusercontent.com www.google-analytics.com d379ifj7s9wntv.cloudfront.net; font-src 'self' data: fonts.gstatic.com; script-src 'self' www.google-analytics.com cdn.jsdelivr.net munchkin.marketo.net .mktoresp.com; style-src 'self' fonts.googleapis.com cdn.jsdelivr.net 'sha256-HNYzPTRt75YR/Yjz4EVJvRKMVMBbL6CMpl655m4gDcw='; connect-src 'self' .mktoresp.com"`
`24`	`24`	`}`
	`25`	`+ hosts {`
	`26`	`+ allowed = [".playframework.com", "localhost:9000", "playframework-com-app"] # playframework-com-app is the upstream host configured in nginx`
	`27`	`+ }`
`25`	`28`	`}`
`26`	`29`	`}`
`27`	`30`