YunoHost-Apps / ntfy_ynh

Send push notifications to your phone or desktop using PUT/POST
https://ntfy.sh/
GNU General Public License v2.0
10 stars 5 forks source link

[autopatch] Fix Host and X-Forwarded-For header spoofing #23

Closed yunohost-bot closed 1 year ago

yunohost-bot commented 1 year ago

The proxied Host header may be spoofed. Description: In most cases "$host" variable are more appropriate, just use it. Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md