No successful run was found on main (8d7ee36) during the generation of this report, so 91780cf was used instead as the comparison base. There might be some changes unrelated to this pull request in this report.
fix: validate X-Forwarded headers with port pattern matching
Fixes protocol validation to accept http/https when allowedDomains exist but lack protocol patterns. Restructures port/host validation to validate port first, then include it when validating host against patterns. Properly extracts hostname without port to avoid duplication when combining with X-Forwarded-Port.