From 35cd2b52957e1bf2093fb6c556012a6f4f04e2b8 Mon Sep 17 00:00:00 2001 From: shimon Date: Wed, 26 Mar 2025 09:39:53 +0200 Subject: [PATCH] adding custom domain validation against _APP_CUSTOM_DOMAIN_DENY_LIST --- app/controllers/api/proxy.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/app/controllers/api/proxy.php b/app/controllers/api/proxy.php index 514b21fe47..cc5b96c78b 100644 --- a/app/controllers/api/proxy.php +++ b/app/controllers/api/proxy.php @@ -63,9 +63,8 @@ App::post('/v1/proxy/rules') $denyListString = System::getEnv('_APP_CUSTOM_DOMAIN_DENY_LIST', ''); $deniedDomains = array_map('trim', explode(',', $denyListString)); - var_dump($deniedDomains); + foreach ($deniedDomains as $deniedDomain) { - var_dump(str_ends_with($domain, $deniedDomain)); if (str_ends_with($domain, $deniedDomain)) { throw new Exception(Exception::GENERAL_ARGUMENT_INVALID, 'You cannot assign your functions domain or its subdomain to a specific resource. Please use a different domain.'); }