XSS and redirect

docker-compose.yaml

@@ -62,8 +62,8 @@ services:
     image: quay.io/hedgedoc/hedgedoc:1.10.1
     environment:
       - CMD_DB_URL=postgres://{{ hedgedoc_user }}:{{ hedgedoc_password }}@hedgedoc_db:5432/hedgedoc
-      - CMD_DOMAIN=localhost
-      - CMD_URL_ADDPORT=true
+      - CMD_DOMAIN=sf-hedgedoc.psi.ch
+      - CMD_URL_ADDPORT=false
     volumes:
       - /opt/webcontent/sf-hedgedoc/uploads:/hedgedoc/public/uploads
     restart: always