Don't Trust the Host Header for Sending Password Reset Emailslightningsecurity.io3 points·cablej··0 commentsOpen articleSaveView on HN