From 7408f72de2be00a2a5c55a46b33b41beb40e13a4 Mon Sep 17 00:00:00 2001
From: Adam Harrison <harrisonadamw@gmail.com>
Date: Fri, 23 Oct 2015 15:10:07 +0100
Subject: [PATCH] Check weaveDNS subdomain on REST PUT

---
 nameserver/http.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nameserver/http.go b/nameserver/http.go
index 29311d4c..5cd70f5a 100644
--- a/nameserver/http.go
+++ b/nameserver/http.go
@@ -35,6 +35,11 @@ func (n *Nameserver) HandleHTTP(router *mux.Router, dockerCli *docker.Client) {
 			return
 		}
 
+		if !dns.IsSubDomain(n.domain, hostname) {
+			n.infof("Ignoring registration %s %s %s (not a subdomain of %s)", hostname, ipStr, container, n.domain)
+			return
+		}
+
 		if err := n.AddEntry(hostname, container, n.ourName, ip); err != nil {
 			n.badRequest(w, fmt.Errorf("Unable to add entry: %v", err))
 			return