How do fix Host header injection in angular application?

We are doing MDAST scan with Burpsuite for our angular application . We got errors in Host Header Injection and Cross-origin-resource-sharing . For accessing local images from dist http request is triggered by angular .Request http://x.x.x.x:9021/ksi.svg has host and referer header doesn't include Origin header (this images loaded from css content: url property). Request http://x.x.x.x:9021/assets/images/pka.svg has only HOST header it doesn't include both origin and referer header (this image is loaded from ). Why is the difference in headers?

Note : Both images locations are pointing to /assets/images/ folder only. Angular version is 13.

Continue reading...