On Mon, Aug 10, 2020 at 10:37:16PM +0200, Sebastian Benoit wrote:
>[...]
> 
> In which way can the current behaviour cause problems?

Whilst a client sending bizarre requests perhaps deserves what they get,
I thought an error status would be better than OK.

If odd hostnames are accepted, they may end up in $SERVER_NAME in
redirects.

>[...]
> As jca@ shows the first host can be a dummy.

That's certainly a nice workaround (although, of course, it requires
configuration and prevents requests without Host headers from getting
anything other than 404).

> 
> I kind of think that this is a documentation problem, we should docuemnt
> this in the manpage and maybe example config:
> 
> diff --git etc/examples/httpd.conf etc/examples/httpd.conf
>[...]

The diff looks good to me.

Thanks to you both.

Ross

Reply via email to