Skip to content

Harden against host header injection and open redirect (CVE-2025-50578)#1568

Merged
KodeStar merged 3 commits into
2.xfrom
fix/host-header-injection
Jul 8, 2026
Merged

Harden against host header injection and open redirect (CVE-2025-50578)#1568
KodeStar merged 3 commits into
2.xfrom
fix/host-header-injection

Enforce TRUSTED_HOSTS allow-list regardless of APP_ENV

9a9877a
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar