From 97be2a6ec26f35fc5e65c961bc5d7c3415c3dd83 Mon Sep 17 00:00:00 2001
From: jaskaransarkaria <jaskaran.sarkaria@digital.justice.gov.uk>
Date: Thu, 31 Oct 2024 16:04:17 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20=F0=9F=90=9B=20bug=20which=20allows=20ho?=
 =?UTF-8?q?st=20header=20injection=20vuln?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/values.yaml.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/values.yaml.tpl b/templates/values.yaml.tpl
index ec0ccc1..cc35c7d 100644
--- a/templates/values.yaml.tpl
+++ b/templates/values.yaml.tpl
@@ -190,7 +190,7 @@ controller:
 %{ endif ~}
     server-snippet: |
       if ($scheme != 'https') {
-        return 308 https://$host$request_uri;
+        return 308 https://$server_name$request_uri;
       }
 
     #