fix #883 by adding a warning on host_regex (#890)

OSC · Nov 29, 2023 · c1aa443 · c1aa443
1 parent c21ce4e
commit c1aa443
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/source/reference/files/ood-portal-yml.rst b/source/reference/files/ood-portal-yml.rst
@@ -634,8 +634,13 @@ assets and links supplied by the web server are relative and not absolute.
 
 .. describe:: host_regex (String)
 
-     the regular expression used as a allowlist for allowing a user to reverse
-     proxy to a given host.
+    .. warning::
+      Wildcards like ``.`` should be avoided because they cause issues in parsing.
+      ``host_regex`` should always have a domain name that your center owns (for security)
+      and should specify lists of character classes like ``[w.-]`` (for proper functionality).
+
+    The regular expression used as a allowlist for allowing a user to reverse
+    proxy to a given host.
 
      Default
        Allow proxying to all hosts in the world (please change this if you