Esri/resource-proxy — pull request #122 by esoekianto (2014-05-30 22:16:31+00:00)
Title: Java: better logic for checking wildcard subdomain

this is improvement from #119

sample snippet of proxy.config
```

```

This includes,
- better handle subdomain attacked found by mehul, referer http://test.esri.com.arcgis.com will NOT get proxied for allowedreferer="http://*.esri.com"
- the allowed referers value must in the format of "aaa.bbb.com", don't include http or https in front
- the referer that coming in must be valid url (which will if it is coming from application), be careful when testing via fiddler, it must be somehting like "http://foo.esri.com/questions/2343/show.php" or simply "http://www.esri.com"
- for allowedreferer value of "*.esri.com", it will allow requests with referer, "http://foo.esri.com" ,"http://foo.maps.esri.com", "http://esri.com", "http://www.esri.com", regardless of http or https
- ip would work, for allowedreferer value of "192.168.0.*", it will allow requests with referer, "http://192.168.0.123"
- for allowedreferer value of "maps.*.com", it will allow requests from "http://maps.aaa.com", but NOT from "http://maps.aaa.bbb.com"

I think I covered most of the cases, let me know if I am missing something @MehulChoksey @bsvensson @jgravois