Document that the Host header isn't validated.

python-websockets · May 18, 2023 · e3abb88 · e3abb88
1 parent 2b627b2
commit e3abb88
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docs/reference/features.rst b/docs/reference/features.rst
@@ -174,6 +174,11 @@ There is no way to control compression of outgoing frames on a per-frame basis
 
 .. _#538: https://github.com/python-websockets/websockets/issues/538
 
+The server doesn't check the Host header and respond with a HTTP 400 Bad Request
+if it is missing or invalid (`#1246`).
+
+.. _#1246: https://github.com/python-websockets/websockets/issues/1246
+
 The client API doesn't attempt to guarantee that there is no more than one
 connection to a given IP address in a CONNECTING state. This behavior is
 `mandated by RFC 6455`_. However, :func:`~client.connect()` isn't the right