15.2.3: allowedDevOrigins not working, breaking hot-reload for subdomains. Reverted to 15.2.1 for now.

[sbkl]

Summary

Since I upgraded to Nextjs version 15.2.3, I get the cross-origin request blocked warning and hot-reloading doesn't work on app.localhost:3000 for instance.

Anything I am missing to make it work? Reverting to 15.2.1 works.

Additional information

Below my next.config.ts

  allowedDevOrigins: ["app.localhost:3000", "*.localhost:3000"],
  experimental: {
    serverActions: {
      allowedOrigins: ["app.localhost:3000", "*.localhost:3000"],
    },
  },

Example

No response

[rosswilson2306]

I'm having this issue also. The issue I seem to have is that I use different domains set in /etc/hosts for 127.0.0.1 . I was able to resolve by adding the domains I set in /etc/hosts to allowDevOrigins but isn't really practical as I can't commit this change.

I guess this might be a security feature though rather than a bug.