-
Notifications
You must be signed in to change notification settings - Fork 11
Open
Labels
Description
Validating Host:Port should be checked. Possible problems are:
- validateHost calls getServerName(), but serverVars['SERVER_NAME'] will not contain port number - if the server not running on port 80 or 443, it might fail
- we should allow the client to add port number, even if its port 80 or 443, and don't fail
- isDefaultPort should check if the request was secure or not, and report defaultness accordingly