Skip to content

Use ASGI scope instead of Host header to reliably detect server port

Andrej Shadura requested to merge reliable-port-detection into main

Host header can be spoofed, making it possible to bypass authentication.

Edited by Andrej Shadura

Merge request reports

Apertis Website Terms of Use Privacy Policy