Skip to content

fix(network-proxy): reject mismatched host headers#13275

Merged
viyatb-oai merged 3 commits intomainfrom
codex/viyatb/network-proxy-host-header-fix
Mar 3, 2026
Merged

fix(network-proxy): reject mismatched host headers#13275
viyatb-oai merged 3 commits intomainfrom
codex/viyatb/network-proxy-host-header-fix

Conversation

@viyatb-oai
Copy link
Collaborator

@viyatb-oai viyatb-oai commented Mar 2, 2026

Summary

  • reject plain HTTP absolute-form requests whose Host header does not match the request target authority
  • add host/port-aware Host header validation for non-default ports
  • add regression coverage for mismatched Host forwarding and validator edge cases

@viyatb-oai viyatb-oai requested review from Copilot and itsmandatory and removed request for Copilot March 3, 2026 23:03
Copy link

@itsmandatory itsmandatory left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@viyatb-oai viyatb-oai merged commit 24a2d0c into main Mar 3, 2026
38 of 39 checks passed
@viyatb-oai viyatb-oai deleted the codex/viyatb/network-proxy-host-header-fix branch March 3, 2026 23:12
@github-actions github-actions bot locked and limited conversation to collaborators Mar 3, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants