From fd4e2f59dcc463dfdad327d9a9f27bd27f225e21 Mon Sep 17 00:00:00 2001
From: Nariman Jelveh <n.jelveh@gmail.com>
Date: Sat, 27 Apr 2024 19:03:48 -0700
Subject: [PATCH] Update WebServerService.js

---
 packages/backend/src/services/WebServerService.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/backend/src/services/WebServerService.js b/packages/backend/src/services/WebServerService.js
index 0985ac704..ca5f5632e 100644
--- a/packages/backend/src/services/WebServerService.js
+++ b/packages/backend/src/services/WebServerService.js
@@ -299,7 +299,7 @@ class WebServerService extends BaseService {
             const hostName = hostHeader.split(':')[0].trim().toLowerCase();
 
             // Check if the hostname matches any of the allowed domains
-            if (allowedDomains.some(allowedDomain => hostName === allowedDomain)) {
+            if (allowedDomains.some(allowedDomain => hostName.endsWith(allowedDomain))) {
                 next(); // Proceed if the host is valid
             } else {
                 return res.status(400).send('Invalid Host header.');