fix(core): allow host headers with default ports

Author: DASPRiD

packages/core/src/http/request.ts

@@ -73,8 +73,9 @@ export class Parts {
         }
 
         const uri = new URL(`${protocol}://${host}${message.url}`);
+        const inferredPort = uri.port === "" ? (protocol === "http" ? "80" : "443") : uri.port;
 
-        if (uri.host !== host) {
+        if (uri.host !== host && `${uri.hostname}:${inferredPort}` !== host) {
             throw new Error(`Host injection discovered: ${host}`);
         }
 

packages/core/test/http/request.test.ts

@@ -111,6 +111,15 @@ describe("http:request", () => {
                 /Host injection discovered: invalid@host/,
             );
         });
+
+        it("fromIncomingMessage throws no error on valid host with default port", () => {
+            const message = new IncomingMessage();
+            message.method = "GET";
+            message.headers["x-forwarded-proto"] = "http";
+            message.headers["x-forwarded-host"] = "proxy.com:80";
+
+            Parts.fromIncomingMessage(message, true);
+        });
     });
 
     describe("HttpRequest", () => {