diff options
| author | Leitwolf11 | 2026-08-28 23:55:52 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-08-28 23:55:52 +0300 |
| commit | 762890d8a3ad02d841d5b46fbbf578e35ffc8708 (patch) | |
| tree | fd38a17a373aecebfbf0205eb45822c4356ec6d3 /apps/api-tests/SecurityHeaderTests.cs | |
| parent | 1ce38648d6e987aaaa06d7d4fff461ef862f9a93 (diff) | |
| download | progmaweb-762890d8a3ad02d841d5b46fbbf578e35ffc8708.tar.gz | |
Preserve the canonical account host across the internal Next.js rewrite by preferring the trusted X-Forwarded-Host value supplied by the dedicated Nginx proxy. This prevents the rewritten /account request from being misclassified as a corporate localhost request and eliminates the account root redirect loop while retaining the public-host isolation rule. Verified Prettier, ESLint, route generation, TypeScript, and the production frontend build.
Diffstat (limited to 'apps/api-tests/SecurityHeaderTests.cs')
0 files changed, 0 insertions, 0 deletions