Repository navigation

Reject non-loopback Host headers for loopback web servers - #5289

Closed

petrmarinec wants to merge 3 commits into

google:mainfrom

petrmarinec:fix-local-host-dns-rebinding

Closed

Reject non-loopback Host headers for loopback web servers#5289
petrmarinec wants to merge 3 commits into
google:mainfrom
petrmarinec:fix-local-host-dns-rebinding

Commits on Jun 10, 2026
- fix: reject rebound hosts for loopback web server
  petrmarinec
  committed
  b024c2c
- test: use loopback host for trigger routes
  petrmarinec
  committed
  dacd589
- fix: keep DevServer imports after rebase
  petrmarinec
  committed
  abad574