Note
Access to this page requires authorization. You can try signing in or .
Access to this page requires authorization. You can try .
RoutingEndpointConventionBuilderExtensions.RequireHost<TBuilder> Method
Definition
- Namespace:
- Microsoft.AspNetCore.Builder
- Assembly:
- Microsoft.AspNetCore.Routing.dll
- Package:
- Microsoft.AspNetCore.App.Ref v10.0.0
- Package:
- Microsoft.AspNetCore.App.Ref v11.0.0-preview.4.26230.115
- Package:
- Microsoft.AspNetCore.App.Ref v3.0.1
- Package:
- Microsoft.AspNetCore.App.Ref v3.1.10
- Package:
- Microsoft.AspNetCore.App.Ref v5.0.0
- Package:
- Microsoft.AspNetCore.App.Ref v6.0.36
- Package:
- Microsoft.AspNetCore.App.Ref v7.0.5
- Package:
- Microsoft.AspNetCore.App.Ref v8.0.19
- Package:
- Microsoft.AspNetCore.App.Ref v9.0.8
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Requires that endpoints match one of the specified hosts during routing.
public:
generic <typename TBuilder>
where TBuilder : Microsoft::AspNetCore::Builder::IEndpointConventionBuilder[System::Runtime::CompilerServices::Extension]
static TBuilder RequireHost(TBuilder builder, ... cli::array <System::String ^> ^ hosts);public static TBuilder RequireHost<TBuilder>(this TBuilder builder, params string[] hosts) where TBuilder : Microsoft.AspNetCore.Builder.IEndpointConventionBuilder;static member RequireHost : 'Builder * string[] -> 'Builder (requires 'Builder :> Microsoft.AspNetCore.Builder.IEndpointConventionBuilder)<Extension()>
Public Function RequireHost(Of TBuilder As IEndpointConventionBuilder) (builder As TBuilder, ParamArray hosts As String()) As TBuilderType Parameters
- TBuilder
Parameters
- builder
- TBuilder
The IEndpointConventionBuilder to add the metadata to.
- hosts
- String[]
The hosts used during routing. Hosts should be Unicode rather than punycode, and may have a port. An empty collection means any host will be accepted.
Returns
A reference to this instance after the operation has completed.
Remarks
APIs that depend on the Host header, including Host and RequireHost<TBuilder>(TBuilder, String[]), are vulnerable to client spoofing.
To safeguard against host and port spoofing:
- Verify the server name used during the TLS handshake using ITlsHandshakeFeature.HostName.
- Verify the local port where the connection was accepted using Connection (specifically LocalPort).
Applies to
Feedback
Was this page helpful?