remove forwarded host

taylorotwell · taylorotwell · commit 74a1aa0825f0 · 2025-09-30T15:33:11.000+01:00
diff --git a/src/Illuminate/Http/Middleware/TrustProxies.php b/src/Illuminate/Http/Middleware/TrustProxies.php
@@ -75,6 +75,11 @@ protected function setTrustedProxyIpAddresses(Request $request)
             $trustedIps = '*';
         }
 
+        if (str_ends_with($request->host(), '.on-forge.com') ||
+            str_ends_with($request->host(), '.on-vapor.com')) {
+            $request->headers->remove('X-Forwarded-Host');
+        }
+
         if ($trustedIps === '*' || $trustedIps === '**') {
             return $this->setTrustedProxyIpAddressesToTheCallingIp($request);
         }

Original file line number	Diff line number	Diff line change
`@@ -75,6 +75,11 @@ protected function setTrustedProxyIpAddresses(Request $request)`
`75`	`75`	`$trustedIps = '*';`
`76`	`76`	`}`
`77`	`77`
	`78`	`+ if (str_ends_with($request->host(), '.on-forge.com') \|\|`
	`79`	`+ str_ends_with($request->host(), '.on-vapor.com')) {`
	`80`	`+ $request->headers->remove('X-Forwarded-Host');`
	`81`	`+ }`
	`82`	`+`
`78`	`83`	`if ($trustedIps === '' \|\| $trustedIps === '*') {`
`79`	`84`	`return $this->setTrustedProxyIpAddressesToTheCallingIp($request);`
`80`	`85`	`}`