Translations:Optional settings/149/en

Host control

• allowedHosts : to avoid Host Header Injection, you can set the allowed host for all action. If you use different host for public page and admin page : you need to set both as allwoed host.

    'config'=>array(
            ....
,		// Update default LimeSurvey config here
		'allowedHosts' => [
			'survey.example.org',
			'proxy.survey.example.com',
			'example.limesurvey.org',
		],
    ),