Walkthrough

This pull request refactors the CORS hostname validation mechanism in Appwrite. The primary change replaces a direct array membership check (in_array) against allowedHosts with a validator-based approach using Utopia\Validator\Hostname. The hostname validator is instantiated with the allowed hosts list and validates incoming hosts against this list. A new unit test verifies that wildcard subdomain patterns (*.example.com) correctly allow subdomains (foo.example.com) and return the appropriate Allow-Origin header value. The change maintains existing lowercasing and wildcard-origin logic throughout the validation process.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

• Verify that the Hostname validator preserves the previous exact match behavior for non-wildcard hosts
• Confirm that wildcard expansion logic (*.example.com → foo.example.com) functions identically to the prior implementation
• Check that case-insensitive host comparison (lowercasing) is maintained by the validator
• Review the new test method covers the documented wildcard subdomain behavior and integrates with existing test patterns

• 📝 Generate docstrings

• X
• Mastodon
• Reddit
• LinkedIn