diff --git a/services/real-time/app.js b/services/real-time/app.js index 4fecd8f8a6..38cb3caec4 100644 --- a/services/real-time/app.js +++ b/services/real-time/app.js @@ -95,6 +95,12 @@ io.configure(function () { const originIsValid = allowedCorsOriginsRegex.test(normalizedOrigin) if (req.headers.origin) { + if (!originIsValid) { + logger.warn( + { normalizedOrigin, origin, req }, + 'Origin header does not match allowed origins' + ) + } return originIsValid }