From 319a2239d3545c34bc8bccad64ef25e078e0a665 Mon Sep 17 00:00:00 2001 From: John Murret Date: Mon, 24 Jul 2023 15:27:19 -0600 Subject: [PATCH] NET-4897 - update comment to include the current issue url from the go team. (#18263) --- api/api.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/api/api.go b/api/api.go index 18bb3479c9..f62c0c5a1b 100644 --- a/api/api.go +++ b/api/api.go @@ -1005,8 +1005,10 @@ func (r *request) toHTTP() (*http.Request, error) { // this is required since go started validating req.host in 1.20.6 and 1.19.11. // prior to that they would strip out the slashes for you. They removed that // behavior and added more strict validation as part of a CVE. - // https://github.com/golang/go/issues/60374 - // the hope is that + // This issue is being tracked by the Go team: + // https://github.com/golang/go/issues/61431 + // If there is a resolution in this issue, we will remove this code. + // In the time being, this is the accepted workaround. if strings.HasPrefix(r.url.Host, "/") { r.url.Host = "localhost" }