{"service":"password reset","hint":"GET /forgot?user=admin with a poisoned Host header, then /reset-log","filter":"Host is accepted when it merely contains trusted.local"}