Haoliang Gao 70d5898fc7 fix: don't allow x-forwarded-host header (#2162) ...

It's a security issue, x-forwarded-host can be retreived
from ctx.host when app.config.proxy is true, and be injected
to cookie domain.

2018-03-05 17:28:37 +08:00

..

agent.test.js

test: use assert instead of should (#837)

2017-05-03 22:37:51 +08:00

application.test.js

fix: don't cache the intermediate locals for application (#1146)

2017-07-04 16:36:52 +08:00

context.jsonp.test.js

chore: use app.httpRequest() instead of supertest (#1041)

2017-06-13 18:03:53 +08:00

context.test.js

fix: try to use custom function name first (#2156)

2018-03-04 23:28:24 +08:00

helper.test.js

chore: use app.httpRequest() instead of supertest (#1041)

2017-06-13 18:03:53 +08:00

request.test.js

fix: don't allow x-forwarded-host header (#2162)

2018-03-05 17:28:37 +08:00

response.test.js

feat: dump run/${type}_config_meta.json (#1155)

2017-07-05 09:16:10 +08:00