Commit Graph

1 Commits

Author SHA1 Message Date
Diego Rodrigues de Sa e Souza
c50033f393 fix(authz): accept direct LAN/loopback-IP host as a valid mutation origin (#5340) (#5341)
Integrated into release/v3.8.41. Accepts direct LAN/loopback-IP host as a valid mutation origin (#5340); origin trust gated on the server-stamped peer, not the spoofable Host. 6 security-boundary tests incl. DNS-rebinding.
2026-06-29 10:31:36 -03:00