Astro's `X-Forwarded-Host` is reflected without validation

Summary When running Astro in on-demand rendering mode using a adapter such as the node adapter it is possible to maliciously send an X-Forwarded-Host header that is reflected when using the recommended Astro.url property as there is no validation that the value is safe. Details Astro reflects th...

EUVD-2006-0624

Malware in sbrugna...

EUVD-2013-3071

Malware in sbrugna...

EUVD-2016-9998

Malware in sbrugna...

EUVD-2005-2772

Malware in sbrugna...

EUVD-2005-2771

Malware in sbrugna...

EUVD-2011-5057

Malware in sbrugna...

EUVD-2010-1411

Malware in sbrugna...

EUVD-2021-1978

Malware in sbrugna...

EUVD-2020-7753

Malware in sbrugna...

EUVD-2020-26888

Malware in sbrugna...

EUVD-2015-3067

Malware in sbrugna...

EUVD-2009-2715

Malware in sbrugna...

EUVD-2013-0439

Malware in sbrugna...

EUVD-2008-5991

Malware in sbrugna...

EUVD-2018-10376

Malware in sbrugna...

EUVD-2006-0622

Malware in sbrugna...

EUVD-2019-7455

Malware in sbrugna...

EUVD-2006-0621

Malware in sbrugna...

EUVD-2019-8613

Malware in sbrugna...