Skip to content

Expose `Rails.application.config.hosts` in the omnibus configuration

Follow-up to https://gitlab.com/gitlab-org/gitlab/-/issues/262652

The Rails.application.config.hosts setting is an allowlist of host headers that the rails application should respond to. It's something that security scanners regularly pick up and it would be good to allow it to be configurable so we could guide customers on how to fix that.