Am I seeing it right that the ktor CSRF Plugin doe...

# ktor

[Tobias Grether]

Am I seeing it right that the ktor CSRF Plugin does not support Host values from Reverse-Proxies? github.com/ktorio/ktor/blob/…/CSRF.kt#…

Because it looks up the Host name directly instead of using call.request.host() and call.request.port() it uses the header directly which is left unchanged by the XForwardedHeaders plugin. Am I missing something here?

[Aleksei Tirman [JB]]

You are correct. I've filed an issue.

[Tobias Grether]

Thank you