src/utils/request.ts (1)

388-397: Intentional divergence from getRequestHost is correct.

The direct header parsing here (duplicating lines 331-332) is the right approach. Using getRequestHost would incorrectly apply the "localhost" fallback, potentially overwriting a valid host already present in the request URL. This ensures url.host is only modified when an actual x-forwarded-host header exists.

The port clearing logic on lines 394-396 correctly handles cases where the forwarded host doesn't include a port.

If desired, the shared parsing logic could be extracted to a private helper to reduce duplication:

♻️ Optional: Extract parsing helper

+function _parseFirstForwardedHost(header: string | null): string | undefined {
+  return (header || "").split(",").shift()?.trim() || undefined;
+}
+
 export function getRequestHost(event: HTTPEvent, opts: { xForwardedHost?: boolean } = {}): string {
   if (opts.xForwardedHost) {
-    const _header = event.req.headers.get("x-forwarded-host");
-    const xForwardedHost = (_header || "").split(",").shift()?.trim();
+    const xForwardedHost = _parseFirstForwardedHost(event.req.headers.get("x-forwarded-host"));
     if (xForwardedHost) {
       return xForwardedHost;
     }
   }
   return event.req.headers.get("host") || "localhost";
 }

This is minor and optional—the current duplication is just 4 lines and the intent is clear.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@src/utils/request.ts` around lines 388 - 397, The direct parsing of the
x-forwarded-host header in this block is correct: ensure you only set url.host
when xForwardedHost (derived from event.req.headers.get("x-forwarded-host")) is
truthy and clear url.port when xForwardedHost does not include ":" (preserve the
existing url.host/url.port assignments), and keep the current behavior rather
than calling getRequestHost (which applies a "localhost" fallback). Optionally,
if you want to remove the small duplication, extract the
header-splitting/trimming logic into a private helper (e.g., parseForwardedHost)
and call it from both this block and getRequestHost, but this is not required.