AIKIDO-2026-10827

TL;DR

The server rendering entry points took a request URL that could point at an absolute attacker-controlled origin. The SSR stack then treated that host as the active location, so relative HttpClient calls and platform hostname reads could be redirected toward the attacker’s server instead of the real deployment. The fix adds an allowlist wired into renderModule and renderApplication so the URL’s hostname must match configured hosts before bootstrap. Applications must pass an explicit allowedHosts list consistent with their deployment.