3 ms·

Not an Apache bug but Wordpress trusting client-supplied data where it shouldn't. SERVER_NAME coming from the HTTP Host header is intentional and documented beh

Not an Apache bug but Wordpress trusting client-supplied data where it shouldn't. SERVER_NAME coming from the HTTP Host header is intentional and documented behavior, ergo not a bug.

m_mueller 10y ago
How is this behavior ever useful server side?
- mintplant 10y ago
  I dunno. My best guess would be that it's there for legacy reasons.