<![CDATA[Login Security Warning]]>Hello. I get the following warning on my GRAV CMS Dashboard:

Login security: no trusted host is configured, so password reset and activation email links are built from the request host and can be spoofed. Set a Site Host in the Login plugin settings, or a Custom Base URL in System settings.

d468d2cd-63a7-40ae-8f36-9081ce118b46-image.jpeg

None of "Site Host" and "Custom Base URL" fields has a value for now. The app is installed under a different domain name than the Cloudron Dashboard. Any advice what to do ?

Thanks !

]]>https://forum.cloudron.io/topic/15631/login-security-warningRSS for NodeThu, 09 Jul 2026 22:56:42 GMTMon, 22 Jun 2026 12:54:52 GMT60<![CDATA[Reply to Login Security Warning on Thu, 25 Jun 2026 15:32:09 GMT]]>@girish

Hello. The updates did solve it and the banner disappeared. Thx.

]]>https://forum.cloudron.io/post/126121https://forum.cloudron.io/post/126121Thu, 25 Jun 2026 15:32:09 GMT<![CDATA[Reply to Login Security Warning on Tue, 23 Jun 2026 12:30:18 GMT]]>@superhua @mononym thanks for reporting, should be fixed in the latest package

]]>https://forum.cloudron.io/post/126023https://forum.cloudron.io/post/126023Tue, 23 Jun 2026 12:30:18 GMT<![CDATA[Reply to Login Security Warning on Mon, 22 Jun 2026 19:38:02 GMT]]>@mononym – I think this is a hardening recommendation from Grav. See more here.

]]>https://forum.cloudron.io/post/125992https://forum.cloudron.io/post/125992Mon, 22 Jun 2026 19:38:02 GMT<![CDATA[Reply to Login Security Warning on Mon, 22 Jun 2026 13:14:53 GMT]]>Hello @mononym
Thanks for reporting.
Will have to look into this.

]]>https://forum.cloudron.io/post/125982https://forum.cloudron.io/post/125982Mon, 22 Jun 2026 13:14:53 GMT