fix: don't allow users to set demo-pro.maglev.dev as the domain of th…

…eir site
maglevhq · Apr 3, 2024 · fbc1c72 · fbc1c72
1 parent cbac31a
commit fbc1c72
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/app/models/site.rb b/app/models/site.rb
@@ -7,7 +7,11 @@ class Site < ApplicationRecord
 
   ## validations ##
   validates :name, presence: true
-  validates :domain, uniqueness: { allow_nil: true }
+  validates :domain, 
+    uniqueness: { allow_nil: true }, 
+    exclusion: { 
+      in: [SiteBuilderDemo::Application.config.x.main_host]
+    }
   validates :theme_id, presence: true, on: :create
 
   ## virtual attributes ##