From 44460b5f954be8a73b0a6b3f217fccb702d7e5fe Mon Sep 17 00:00:00 2001 From: hc-github-team-consul-core Date: Thu, 3 Aug 2023 18:27:55 -0400 Subject: [PATCH] Backport of NET-4897 - update comment to include the current issue url from the go team. into release/1.16.x (#18266) backport of commit 23f0cfc2d6955bcb599cca56b14dc76cc41d5320 Co-authored-by: John Murret --- api/api.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/api/api.go b/api/api.go index 18bb3479c..f62c0c5a1 100644 --- a/api/api.go +++ b/api/api.go @@ -1005,8 +1005,10 @@ func (r *request) toHTTP() (*http.Request, error) { // this is required since go started validating req.host in 1.20.6 and 1.19.11. // prior to that they would strip out the slashes for you. They removed that // behavior and added more strict validation as part of a CVE. - // https://github.com/golang/go/issues/60374 - // the hope is that + // This issue is being tracked by the Go team: + // https://github.com/golang/go/issues/61431 + // If there is a resolution in this issue, we will remove this code. + // In the time being, this is the accepted workaround. if strings.HasPrefix(r.url.Host, "/") { r.url.Host = "localhost" }