[1.3.X] Fixed a security issue in get_host.

Full disclosure and new release forthcoming.

Conflicts:
	django/http/__init__.py
	tests/regressiontests/requests/tests.py