Skip to content

service: Validate host header

Jens Georg requested to merge wip/24 into master

Make sure that the host header matches the ip:port of the context.

This is in line with UDA (Host header is required and must match the location url) and DLNA 7.2.24.1 (All communication has to use ip addresses and not names)

Prevents DNS rebinding attacs against agains UPnP services

Merge request reports