Merge pull request #19 from comicrelief/stricter-host-check

Stricter worldpay.com host check
comicrelief · Mar 15, 2018 · 2c3ed1f · 2c3ed1f
2 parents 99dab4f + e278729
commit 2c3ed1f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Omnipay/WorldpayCGHosted/Message/Notification.php b/src/Omnipay/WorldpayCGHosted/Message/Notification.php
@@ -155,10 +155,10 @@ private function originIsValid()
             return false;
         }
 
-        $expectedEnd = 'worldpay.com'; // todo fix me
+        $expectedEnd = '.worldpay.com';
         $expectedPosition = strlen($hostname) - strlen($expectedEnd);
 
-        if (strpos($hostname, $expectedEnd) === $expectedPosition) {
+        if (strpos($hostname, $expectedEnd) === $expectedPosition || $hostname === 'worldpay.com') {
             return true;
         }