@lann pointed out that currently we only check the host when verifying the guest can make an outbound HTTP request: https://github.com/deislabs/wasi-experimental-http/blob/4591a4814a66289ea6cc6c4721eba27d623197a0/crates/wasi-experimental-http-wasmtime/src/lib.rs#L617 This should check the origin instead.
@lann pointed out that currently we only check the host when verifying the guest can make an outbound HTTP request:
wasi-experimental-http/crates/wasi-experimental-http-wasmtime/src/lib.rs
Line 617 in 4591a48
This should check the origin instead.