YunoHost-Apps / wikijs_ynh

Modern and powerful wiki app package for YunoHost
https://wiki.js.org/
GNU Affero General Public License v3.0
18 stars 4 forks source link

[autopatch] Fix Host and X-Forwarded-For header spoofing #227

Closed yunohost-bot closed 11 months ago

yunohost-bot commented 12 months ago

The proxied Host header may be spoofed. Description: In most cases "$host" variable are more appropriate, just use it. Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/hostspoofing.md