From 32b36b69273651bd93cda7ca0efdede7babdba9e Mon Sep 17 00:00:00 2001 From: Mark Story Date: Sat, 19 Sep 2026 13:30:28 -0400 Subject: [PATCH] Fix owasp link for host header injection Fixes #1105 --- src/Middleware/HostHeaderMiddleware.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Middleware/HostHeaderMiddleware.php b/src/Middleware/HostHeaderMiddleware.php index e6ab5782c..2e0dff7ce 100644 --- a/src/Middleware/HostHeaderMiddleware.php +++ b/src/Middleware/HostHeaderMiddleware.php @@ -18,7 +18,7 @@ * and validates incoming Host headers against it. This prevents attackers * from manipulating password reset links and other security-critical URLs. * - * @see https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/17-Testing_for_Host_Header_Injection + * @see https://wstg.owasp.org/v4.2/4-Web_Application_Security_Testing/07-Input_Validation_Testing/17-Testing_for_Host_Header_Injection/ */ class HostHeaderMiddleware implements MiddlewareInterface {