Tomcat: getHeader(“Host”) vs. getServerName()

Question

I\'ve got a Tomcat app that is being served up from multiple domains. Previous developers built a method to return the application URL (see below). In the method they reques

Answer 1

Maybe not related to this question. If you are using tomcat, you can specify any Host string in the request header, even javascript like

Then it could be shown on the page.:

 host name is : <%= request.getServerName() %> 

So you need to verify it before using it.