monsur/enable-cors.org — pull request #86 by erauer (2014-12-06 00:24:28+00:00)
Title: Add End of String $ for nginx domain regex

The Regex for the domain check does not include an end of string terminator ($) so it would allow a match on additional hosts like "mckinsey.com.untrusteddomain.com"