This plug protects your websites and APIs from "Host header attack".
pipeline :browser do
plug AllowedHosts, ["example.com", "example2.com"]
end