Server names#

Hypercorn can be configured to only respond to requests that have a recognised host header value by adding the recognised hosts to the server_names configuration variable. Any requests that have a host value not in this list will be responded to with a 404.

DNS rebinding attacks#

Setting the server_names configuration variable helps mitigate DNS rebinding attacks and hence is recommended.