Shing.
Results
3
comments of
Shing.
Hey @andrewhavck updated.
> What's there to "spoof" anyways? Host is not usually used by reverse proxies, so no third party involved. And curl -H 'Host: foo.com' bar.com, curl -H 'Host: foo.com' foo.com...
> But when the client sets `Host: foo.com` then it simply gets the content for the domain `foo.com`. If `Host: bar.com`, it gets the content for `bar.com`. And that's strictly...