diff --git a/src/server.ts b/src/server.ts index e9bc07a7f8..421ad60c1f 100644 --- a/src/server.ts +++ b/src/server.ts @@ -14,6 +14,15 @@ import vhost = require('vhost'); const app = express(); app.disable('x-powered-by'); +// Reject request that without 'Host' header +app.use((req, res, next) => { + if (!req.headers.host) { + res.sendStatus(400); + } else { + next(); + } +}); + /** * Register modules */