A middleware to avoid opening your site to be accessed by arbitrary domains

.env

TRUSTED_HOST=http://youraddress.com

.Laravel Trusted Host Middleware

A middleware to avoid opening your site to be accessed by arbitrary domains

Kernel.php

<?php

namespace App\Http;

use App\Http\Middleware\TrustedHostMiddleware;
use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel
{
    /**
     * The application's global HTTP middleware stack.
     *
     * @var array
     */
    protected $middleware = [
        \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
        \App\Http\Middleware\EncryptCookies::class,
        \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
        \Illuminate\Session\Middleware\StartSession::class,
        \Illuminate\View\Middleware\ShareErrorsFromSession::class,
        \App\Http\Middleware\VerifyCsrfToken::class,
        TrustedHostMiddleware::class
    ];
}

TrustedHostMiddleware.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class TrustedHostMiddleware
{
    public function handle($request, Closure $next)
    {
        if (env('TRUSTED_HOST')) {
            Request::setTrustedHosts([env('TRUSTED_HOST')]);
        }

        return $next($request);
    }
}