milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add small comment on why we're removing the host header before forwarding.

Browse source
This commit is contained in:
Sander Declerck 2025-11-24 15:25:56 +01:00
parent faae0488c8
commit 0a8dacda24
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packages/safe-chain/src/registryProxy/mitmRequestHandler.js
View file

@ -151,6 +151,8 @@ function forwardRequest(req, hostname, res, requestHandler) {
function createProxyRequest(hostname, req, res, requestHandler) {
/** @type {NodeJS.Dict<string | string[]> | undefined} */
let headers = { ...req.headers };
// Remove the host header from the incoming request before forwarding.
// Node's http module sets the correct host header for the target hostname automatically.
if (headers.host) {
delete headers.host;
}