Stack Overflow
Stack Overflow

Questions tagged [hostheaders]

68 questions
0
votes
1 answer

How to call cloudfront distribution with wrong Host header

Prerequisites I have configured a custom domain for an API Gateway. The endpoint type is edge, as the API Gateway (RestApi) is edge. I also issued a certificate through cdk. This is some of the code used: const zone =…
agoldev
  • 2,078
  • 3
  • 23
  • 38
0
votes
0 answers

Prevent Improper-Input-Handling attack

I'm trying fix a site vulnerability, it is "Improper Input Handling" attack raised by WhiteHat. Let's say my website is www.mywebsite.com and there is hacker's website www.hacker.com whenever there is a request send to www.mywebsite.com with…
Pradeep
  • 1
  • 1
0
votes
1 answer

How to make a WCF Service hosted in IIS 6 Use the Host Name in Metadata instead of the IP Address?

Can anyone confirm or deny that it is possible to set an IP address as a host header on IIS 6.0? I have seen others on forums that claim to have made this work however I am having no luck with a "Bad Request (Invalid Hostname)" for reply.
baileyswalk
  • 1,198
  • 2
  • 17
  • 29
0
votes
0 answers

Nginx Disable Overwriting host to http_host

Nginx by default overwrites the $host property to $http_host if the http host header is present. Is there a way to disable this behavior? I want to prevent host-header injection by disabling this behavior.
amitng
  • 31
  • 3
0
votes
1 answer

Route traffic through Azure Function proxy based on host header

I'm trying to serve multiple sites through function proxy. Site1 => /docs => docs.example.com/ Site2 => /docs => docs.contoso.com/ It's possible through frontdoor. But just wondering if this is possible with Azure function proxy ?
Venkata Dorisala
  • 4,783
  • 7
  • 49
  • 90
0
votes
1 answer

Deploying WCF - Need to Set the Host Headers on an SSL Site

Using Visual Studio 2010 / .NET 4.0 I've been at this for hours but I'll try to be specific. I'm deploying a WCF 4.0 Service to IIS 7. It works fine under http. I can add a service reference from Visual Studio against the WCF service and code…
Help Me
  • 1
  • 1
0
votes
0 answers

Django server-side request forgery with fake host header

A have a Django app using the built-in settings called ALLOWED_HOSTS that whitelists request Host headers. This is needed as Django uses the Host header provided by the client to construct URLs in certain…
M3RS
  • 6,720
  • 6
  • 37
  • 47
0
votes
2 answers

How to remove multiple IIS bindings in PowerShell fast?

In a process of version upgrade, our current solution takes all bindings (except for two dummy urls) from one site and setting them on another site. I'm currently removing the bindings through PowerShell but it is super slow. I've looked on about…
Idan Levi
  • 388
  • 3
  • 18
0
votes
2 answers

URL Rewrite for Host Header is not working using IIS in asp.net

I do not want to redirect any malicious link or user to redirect to other domain. Instead it should redirect to the domain which I mentioned. So for that, I have written below Rewrite URL rule by using IIS server …
Nad
  • 4,605
  • 11
  • 71
  • 160
0
votes
1 answer

How do I preserve a host header in the browser's url after a 301 redirect?

I've got a mandate to make an internal URL (coolnewproduct.mycoolcorp.net) redirect to an external entity (mycoolcorp.coolerproducts.com). Im using nginx to perform a 301 redirect for coolnewproduct.mycoolcorp.net to mycoolcorp.coolerproducts.com…
Vlad Bekker
  • 11
  • 2
0
votes
0 answers

Get request with requests is not returning host header

I just came across the term 'Host Header' and I believe that I understand it fairly well. I was wondering how I could find out the host header through the requests library. I would think that it would be as simple as setting a requests.get(
UCProgrammer
  • 517
  • 7
  • 21
0
votes
0 answers

how to prevent host header injection in struts2 (JAVA) (Jboss-as-7.2.0.Final)

I'm just trying to find the solution for host header injection but couldn't find it. Need help from you techies. Using struts2 as a framework, jsp as frontend and jboss 7 as an application server . Below are the sample request, GET…
Sagar Borkhatariya
  • 11
  • 3
0
votes
1 answer

Set proxypass domain from header

Trying to find a way to implement a proxypass based on the incoming header. For instance: proxyPass / https://%{{x-backend-host}}/ Where X-backend-host will be in the request headers. The idea behind this is to have multiple incoming domains, i.e…
Dale
  • 43
  • 5
0
votes
0 answers

Azure Server error when port appended to host header

I'm running an Azure Web App that's meant to accept XML Posts. When I post to the urls using cURL everything works, however, when using Apache Camel/HTTP the POST results in a 400 error. When I look at the log files, the only difference is cs-host…
Chris
  • 1
  • 3
0
votes
5 answers

How can I access a website configured with host headers in IIS on the local machine?

When using host headers to host multiple websites on the same IP address in IIS, is there any way of accessing that website from a browser running on the local machine? This is normally required when a given web component only allows configuration…
Gareth Jenkins
  • 2,606
  • 1
  • 19
  • 21
1 2 3
4
5