https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31699 --- Comment #39 from Tomás Cohen Arazi <tomascohen@gmail.com> --- Hi, I'm still not convinced, to be honest. In production it is common to use several domain names for the same Koha instance, and I don't think sticking to OpacBaseURL is enough for that use case. In my opinion, using OpacBaseURL as a fixed value (instead of an allow-list) is a design mistake because of what I mentioned above. We should somehow be using x-forwarded-for or similar header. I know solving it is not this bug's responsability. But I think we should be able to find a nicer approach. That said, this is a bugfix and we can still think about it and if it doesn't make it to the release date it will be backported for sure. -- You are receiving this mail because: You are watching all bug changes.