Do not send the default port in the Host header

[sschlein]

Sharing an HTTPS site (e.g. expose share https://mysite.test or herd share on a secured site) sent Host: mysite.test:443 to the local app. WordPress treats that as a non-canonical URL and answers every request with a 301 to the local domain, so the tunnel was unusable. For the same reason, Location headers were never rewritten for HTTPS shares, because the redirect target mysite.test does not contain mysite.test:443.

The Host header is now taken from the request URI, which omits the default port of its scheme, and Location matching ignores the :443 that Expose appends itself.

Why this does not break other setups:

• The connection target is unchanged; only the header is normalized. It now matches what every browser sends.
• Non-default ports (:8443, localhost:8080) are kept in the Host header and still rewritten in Location.
• HTTP shares behave exactly as before.
• Client-only change, no protocol change, works with all existing servers.

🤖 Generated with Claude Code