4 ms·

I don't see why you should care. Don't allow the requests from non hosted domains on your server. You don't control the DNS' you can't rely on people to updat

I don't see why you should care. Don't allow the requests from non hosted domains on your server. You don't control the DNS' you can't rely on people to updated them.

mwgarcia 6y ago
Totally agree. I failed to add server_name to my nginx config. IIRC I wrongly assumed that it can only accept one domain/pattern and didn't want to bother so I can simplify testing using localhost.
Hnrobert42 6y ago
I think the concern is for the domain owner who could get a visit from the government if “their” server is serving something illegal.
detaro 6y ago
The domain owner should care, because OP could misuse the domain.
- bilekas 6y ago
  Right, the domain owner should care. Not OP.
  - pontifier 6y ago
    But OP does care about others. If you own a domain it's a non-obvious vulnerability. Thanks OP!
  - deleted 6y ago
    [deleted]