id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
20303	HTTP_X_FORWARDED_HOST can be multi-valued with USE_X_FORWARDED_HOST	john_borwick@…	nobody	"Hello! It turns out HTTP_X_FORWARDED_HOST can be multi-valued and separated with commas. This makes USE_X_FORWARDED_HOST + ALLOWED_HOSTS/get_host() unhappy, as it slurps the whole string into host.

The attached patch (and I'd appreciate any tips on how to do this as I don't really know how to submit patches) looks for a comma in HTTP_X_FORWARDED_HOST and pulls the first value into host."	Bug	closed	Uncategorized	1.5	Normal	duplicate	allowed_hosts		Unreviewed	1	0	0	0	0	0