check request.trusted_hosts
in Map.bind_to_environ
#3007
Open
Description
Map.bind_to_environ
can be passed an environ or a request object. But it always calls get_host(environ)
. If it used request.host
if a request was passed, this would check request.trusted_hosts
during routing. See pallets/flask#5636
Metadata
Assignees
Labels
No labels