{"library":"host-validation-middleware","type":"library","category":null,"description":"host-validation-middleware is an npm package providing Connect/Express-compatible middleware designed to protect against DNS rebinding attacks by validating the `Host` header in incoming HTTP requests. The current stable version is 0.1.4, indicating it's still in an early development phase but receives maintenance patches. It differentiates itself by offering flexible host matching, including subdomain wildcard support (e.g., `.mydomain.com`), and automatically allowing `localhost` and IP addresses which are not susceptible to DNS rebinding. While crucial for HTTP development environments, the package explicitly notes that its utility is significantly reduced for HTTPS production sites, as DNS rebinding attacks are generally ineffective against encrypted connections. Its core logic is inspired by the `allowedHosts` option found in `webpack-dev-server`.","language":"javascript","status":"active","version":"0.1.4","tags":["javascript","connect","development","express","middleware"],"last_verified":"Wed May 27","install":[{"cmd":"npm install host-validation-middleware","imports":["import { hostValidationMiddleware } from 'host-validation-middleware'","import { isHostAllowed } from 'host-validation-middleware'"]},{"cmd":"yarn add host-validation-middleware","imports":[]},{"cmd":"pnpm add host-validation-middleware","imports":[]}],"homepage":null,"github":"https://github.com/sapphi-red/host-validation-middleware","docs":null,"changelog":null,"pypi":null,"npm":"https://www.npmjs.com/package/host-validation-middleware","openapi_spec":null,"status_page":null,"smithery":null,"compatibility":{"summary":{"python_range":"18–22","success_rate":0,"avg_install_s":null,"avg_import_s":null,"wheel_type":null},"url":"https://checklist.day/v1/registry/host-validation-middleware/compatibility"}}