Looking for the vulnerability index of Invicti's legacy products?
Drupal trusted_host_patterns setting not configured - Vulnerability Database

Drupal trusted_host_patterns setting not configured

Description

The trusted_host_patterns setting is not configured for your Drupal installation. This setting can be configured from settings.php and protects against HTTP Host Header attacks. This should be an array of regular expression patterns, representing the hosts you would like to allow. It's recommended to configure this setting in a production website.

Remediation

Edit <strong>settings.php</strong> and configure <strong>trusted_host_patterns</strong> as you can see in the example below. <br/><br/> In this example, the site is only allowed to run from www.example.com. <pre> $settings['trusted_host_patterns'] = [ '^www\.example\.com$', ]; </pre>

Related Vulnerabilities