Issue adding specific URL in InsecureContentAllowedForUrls

Question

I am trying to add a URL to the policy InsecureContentAllowedForUrls. The URL is actually a small service that downloads files created on the fly. The service is not using any aliases but just the server name (name of the box) in the URL. So it looks like this when we try to download a file:

http://myservermachinename/repository/file.xlxs

We have tried adding these to the policy and it does not work:

://myservermachinename:/* ://myservermachinename.mydomain.com:/*

And it does not work. However, if I add the following pattern then it works:

://[.]mydomain.com:/

Any ideas why the server name itself does not work?

Answer 1

A domain can be prefixed by a wildcard “[*.]” to match the domain or any of its subdomains. The domain in question can be a subdomain of any level.

For example, [*.] mysite.com will match both mysite.com and subdomain.mysite.com. It will also match any scheme, port, and path.