Skip to content

Commit

Permalink
Allow Link Checker API to connect to host
Browse files Browse the repository at this point in the history
We're seeing Link Checker API client errors [in Sentry](https://govuk.sentry.io/issues/5982406876/events/67b8507af36b472ca5e2aed567258c6d/?project=202233&referrer=next-event) where it's failing to connect to Whitehall:

```
Faraday::ForbiddenError
the server responded with status 403 (Faraday::ForbiddenError)
```

We need to allow requests from Link Checker API.

Trello: https://trello.com/c/VvHwUqD8/3022-investigate-whitehall-403-responses-to-link-checker-api-callbacks
  • Loading branch information
ChrisBAshton authored Oct 18, 2024
1 parent 8dc3a51 commit 31d540a
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions config/environments/production.rb
Original file line number Diff line number Diff line change
Expand Up @@ -105,6 +105,7 @@
# Enable DNS rebinding protection and other `Host` header attacks.
config.hosts = [
/whitehall-admin\..*\.gov.uk$/,
/link-checker-api\..*\.govuk-internal\.digital$/,
]

# Skip DNS rebinding protection for the default health check endpoint.
Expand Down

0 comments on commit 31d540a

Please sign in to comment.