From d0347325fc1c41ad31026fba08b6c0277fae8e9b Mon Sep 17 00:00:00 2001 From: fatedier Date: Fri, 13 Feb 2026 14:10:18 +0800 Subject: [PATCH] pkg/config: fix custom domain validation to prevent false matches with subdomain host (#5178) --- pkg/config/v1/validation/proxy.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/config/v1/validation/proxy.go b/pkg/config/v1/validation/proxy.go index d8e3d01e..744620f0 100644 --- a/pkg/config/v1/validation/proxy.go +++ b/pkg/config/v1/validation/proxy.go @@ -81,7 +81,7 @@ func validateDomainConfigForClient(c *v1.DomainConfig) error { func validateDomainConfigForServer(c *v1.DomainConfig, s *v1.ServerConfig) error { for _, domain := range c.CustomDomains { if s.SubDomainHost != "" && len(strings.Split(s.SubDomainHost, ".")) < len(strings.Split(domain, ".")) { - if strings.Contains(domain, s.SubDomainHost) { + if strings.HasSuffix(domain, "."+s.SubDomainHost) { return fmt.Errorf("custom domain [%s] should not belong to subdomain host [%s]", domain, s.SubDomainHost) } }