minor #7759 Fix trusted hosts example regular expressions (thewilkybarkid)

xabbuh · xabbuh · commit b9f8a4fd6d81 · 2017-04-08T12:16:01.000+02:00
This PR was merged into the 2.7 branch. Discussion ---------- Fix trusted hosts example regular expressions Allow subdomains but not prefixed domains (eg evilexample.com). Commits ------- e3f038b Fix trusted hosts example regular expressions
diff --git a/reference/configuration/framework.rst b/reference/configuration/framework.rst
@@ -362,14 +362,14 @@ respond and the user will receive a 500 response.
             'trusted_hosts' => array('example.com', 'example.org'),
         ));
 
-Hosts can also be configured using regular expressions (e.g.  ``.*\.?example.com$``),
+Hosts can also be configured using regular expressions (e.g.  ``^(.+\.)?example.com$``),
 which make it easier to respond to any subdomain.
 
 In addition, you can also set the trusted hosts in the front controller
 using the ``Request::setTrustedHosts()`` method::
 
     // web/app.php
-    Request::setTrustedHosts(array('.*\.?example.com$', '.*\.?example.org$'));
+    Request::setTrustedHosts(array('^(.+\.)?example.com$', '^(.+\.)?example.org$'));
 
 The default value for this option is an empty array, meaning that the application
 can respond to any given host.
