escher-php icon indicating copy to clipboard operation
escher-php copied to clipboard

Validating Host

Open boogie opened this issue 9 years ago • 0 comments

Validating Host:Port should be checked. Possible problems are:

  • validateHost calls getServerName(), but serverVars['SERVER_NAME'] will not contain port number - if the server not running on port 80 or 443, it might fail
  • we should allow the client to add port number, even if its port 80 or 443, and don't fail
  • isDefaultPort should check if the request was secure or not, and report defaultness accordingly

boogie avatar Mar 05 '15 15:03 boogie